OpenCanary - MSSQL Login Attempt Via SQLAuth (3ec9a16d-0b4f-4967-9542-ebf38ceac7dd)

Detects instances where an MSSQL service on an OpenCanary node has had a login attempt using SQLAuth.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
OpenCanary - MSSQL Login Attempt Via SQLAuth (3ec9a16d-0b4f-4967-9542-ebf38ceac7dd)	Sigma-Rules	Data from Information Repositories - T1213 (d28ef391-8ed4-45dc-bc4a-2f43abf54416)	Attack Pattern	1
OpenCanary - MSSQL Login Attempt Via SQLAuth (3ec9a16d-0b4f-4967-9542-ebf38ceac7dd)	Sigma-Rules	OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22)	Attack Pattern	1