Key takeaway

This use case gives your SOC something it has never had: confirmed exploitation at the code level. Not “suspicious pattern matched” — “this attack payload reached HikariProxyStatement.execute() and modified the SQL query.” That certainty changes triage from investigation to response.