MSSQL Server Failed Logon From External Network (ebfe73c2-5bc9-4ed9-aaa8-8b54b2b4777d)
Detects failed logon attempts from clients with external network IP to an MSSQL server. This can be a sign of a bruteforce attack.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| MSSQL Server Failed Logon From External Network (ebfe73c2-5bc9-4ed9-aaa8-8b54b2b4777d) | Sigma-Rules | Brute Force - T1110 (a93494bb-4b80-4ea1-8695-3236a49916fd) | Attack Pattern | 1 |