SQL Server Dedicated Admin Connection (DAC) suspicious activity

Detects scenarios where an attacker enabled the DAC mode in order to bypass access controls, logon triggers, perform brute force attacks or run unauthorized queries.