{
	"Name": "Microsoft Windows SQL Server Database Audit",
	"Author": "Community",
	"Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/Azure_Sentinel.svg\"width=\"75px\"height=\"75px\">",
	"Description": "The Microsoft Windows SQL Server Database Audit solution for Microsoft Sentinel enables security monitoring scenarios using Windows events. The contents of the solution allow hunting for unauthorized access and other abnormalities with SQL database identities.",
	"Hunting Queries": [
		"Hunting Queries/SQL-Failed SQL Logons.yaml",
		"Hunting Queries/SQL-MultipleFailedLogon_FromSameIP.yaml",
		"Hunting Queries/SQL-MultipleFailedLogon_InShortSpan.yaml",
		"Hunting Queries/SQL-New_UserCreated.yaml",
		"Hunting Queries/SQL-UserAdded_to_SecurityAdmin.yaml",
		"Hunting Queries/SQL-UserDeletedFromDatabase.yaml",
		"Hunting Queries/SQL-UserRemovedFromSecurityAdmin.yaml",
		"Hunting Queries/SQL-UserRemovedFromServerRole.yaml",
		"Hunting Queries/SQL-UserRoleChanged.yaml"
	],
	"Metadata": "SolutionMetadata.json",
	"BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Microsoft Windows SQL Server Database Audit",
	"Version": "3.0.1",
	"TemplateSpec": true,
	"Is1PConnector": false
}