OpenCanary - MSSQL Login Attempt Via Windows Authentication (6e78f90f-0043-4a01-ac41-f97681613a66)

Detects instances where an MSSQL service on an OpenCanary node has had a login attempt using Windows Authentication.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Data from Information Repositories - T1213 (d28ef391-8ed4-45dc-bc4a-2f43abf54416)	Attack Pattern	OpenCanary - MSSQL Login Attempt Via Windows Authentication (6e78f90f-0043-4a01-ac41-f97681613a66)	Sigma-Rules	1
OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22)	Attack Pattern	OpenCanary - MSSQL Login Attempt Via Windows Authentication (6e78f90f-0043-4a01-ac41-f97681613a66)	Sigma-Rules	1