Veeam Backup Database Suspicious Query (696bfb54-227e-4602-ac5b-30d9d2053312)
Detects potentially suspicious SQL queries using SQLCmd targeting the Veeam backup databases in order to steal information.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5) | Attack Pattern | Veeam Backup Database Suspicious Query (696bfb54-227e-4602-ac5b-30d9d2053312) | Sigma-Rules | 1 |