OpenCanary - MSSQL Login Attempt Via SQLAuth — Detection Rule

Detects instances where an MSSQL service on an OpenCanary node has had a login attempt using SQLAuth.

Read the full analysis on IntelFusions