sap gateway ufo table access
Detects external RFC calls to generic SAP table-read modules (such as RFC_READ_TABLE, BBP_RFC_READ_TABLE, or RFC_GET_TABLE_ENTRIES) via the SAP Gateway. This pattern is indicative of unauthorized reconnaissance or data staging attempts within an SAP environment by non-service accounts.
YARA-L
