Pathlock TDnR - Missing SAP Security Notes
Detects alerts for missing SAP security notes (OSS Notes) in the environment, forwarded by Pathlock Threat Detection and Response. Unpatched SAP systems with known CVEs represent a significant attack surface and may…
Description
Detects alerts for missing SAP security notes (OSS Notes) in the environment, forwarded by Pathlock Threat Detection and Response. Unpatched SAP systems with known CVEs represent a significant attack surface and may be actively exploited by threat actors targeting SAP vulnerabilities.
Detection logic
Detection requirements
- Platform
- ESXiIaaSLinuxmacOSNetwork DevicesWindows
The rule states no platform. This is derived from the ATT&CK technique it maps to.
- Log source product
- pathlock_tdnr
- Log source service
- pathlock_tdnr_cl
MITRE ATT&CK mappings
0 exclusive techniques.This is coverage no other published rule has; it is not this rule's total technique count.
No references are available for this detection.
From the source
- At source
- Open at source
- Upstream identifier
- 2a3b4c5d-6e7f-4a0b-8c1d-2e3f4a5b6c37
- Tagged by the source as
- Discovery
Licence
- Published under
- MIT LicenseRead the licence
- Attribution
- Required
- Obtained under
- MITRead the origin licence
Authorship
- Published
- Sep 1, 2026
- Version
- 1