Delete Failed SQL Logons
This commit is contained in:
Родитель
7ca5b5fea7
Коммит
ac098bf69e
|
@ -1,7 +0,0 @@
|
|||
// This detection query is based on the SQLEvent KQL Parser provided at https://github.com/Azure/Azure-Sentinel/tree/master/Parsers/SQLSever
|
||||
// Detailed blog post on Monitoring SQL Server with Azure Sentinel https://techcommunity.microsoft.com/t5/azure-sentinel/monitoring-sql-server-with-azure-sentinel/ba-p/1502960
|
||||
//
|
||||
//
|
||||
SQLEvent
|
||||
| where LogonResult has "failed"
|
||||
| summarize count() by CurrentUser, Reason
|
Загрузка…
Ссылка в новой задаче