2_ds_microsoft_sql_server.md
June 14, 2023 · View on GitHub
| Use-Case | Event Types/Parsers | MITRE ATT&CK® TTP | Content |
|---|---|---|---|
| Data Access | database-login ↳leef-mssql-database-login-1 ↳leef-mssql-database-login-2 ↳s-database-login-18454 ↳s-database-login-18453 ↳cef-syslog-microsoft-db-login ↳cef-syslog-microsoft-db-impersonate ↳s-mssql-database-login-xml ↳s-mssql-database-login ↳mssql-database-login ↳cef-microsoft-database-login ↳s-mssql-database-login-1 ↳xml-mssql-database-login ↳xml-mssql-database-login-1 ↳cef-mssql-database-login ↳s-microsoft-database-login database-query ↳s-mssql-database-query-sl-1 ↳xml-mssql-database-login ↳mssql-database-query-3 ↳s-mssql-database-query-sl-xml ↳s-mssql-database-query-al ↳s-mssql-database-query-dl ↳s-mssql-database-query-sl ↳s-mssql-database-query-dl-xml ↳s-mssql-database-query-al-xml ↳mssql-database-query-2 failed-app-login ↳s-failed-app-login ↳exalms-sqlserver-failed-login ↳exalms-sqlserver-failed-login-1 | T1078 - Valid Accounts T1213 - Data from Information Repositories |
|