Suspicious SQL Query (d84c0ded-edd7-4123-80ed-348bb3ccc4d5)

Detects suspicious SQL query keywrods that are often used during recon, exfiltration or destructive activities. Such as dropping tables and selecting wildcard fields

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Exploit Public-Facing Application - T1190 (3f886f2a-874f-4333-b794-aa6075009b1c)	Attack Pattern	Suspicious SQL Query (d84c0ded-edd7-4123-80ed-348bb3ccc4d5)	Sigma-Rules	1
SQL Stored Procedures - T1505.001 (f9e9365a-9ca2-4d9c-8e7c-050d73d1101a)	Attack Pattern	Suspicious SQL Query (d84c0ded-edd7-4123-80ed-348bb3ccc4d5)	Sigma-Rules	1
SQL Stored Procedures - T1505.001 (f9e9365a-9ca2-4d9c-8e7c-050d73d1101a)	Attack Pattern	Server Software Component - T1505 (d456de47-a16f-4e46-8980-e67478a12dcb)	Attack Pattern	2