01
detectionlint / library / sigma

Suspicious SQL Query

sigmaDRL-1.1from SigmaHQ/sigma

Detects suspicious SQL query keywrods that are often used during recon, exfiltration or destructive activities. Such as dropping tables and selecting wildcard fields

02
quality100
fp risk—
forks0
views2

ATT&CK techniques

rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in