Log source category

database log source Sigma rules

1 Sigma detection rule in the library use the database log source. The database category groups related telemetry so you can find detections that consume the same events. Open a rule to read its detection logic, MITRE ATT&CK mapping and original YAML.

1 rule

Severity

medium1

Suspicious SQL Query
medium
Detects suspicious SQL query keywrods that are often used during recon, exfiltration or destructive activities. Such as dropping tables and selecting wildcard fields

Severity

Suspicious SQL Query