MSSQL Destructive Query — Detection Rule

Detects the invocation of MS SQL transactions that are destructive towards table or database data, such as "DROP TABLE" or "DROP DATABASE".

Read the full analysis on IntelFusions