VeeamBackup Database Credentials Dump Via Sqlcmd.EXE — Detection Rule

Detects dump of credentials in VeeamBackup dbo

Read the full analysis on IntelFusions