Advanced Threat Protection can detect potential SQL injections: This alert is triggered when an active exploit happens against an identified application vulnerability to SQL injection. This means the attacker is trying to inject malicious SQL statements using the vulnerable application code or stored procedures. References: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-threat-detection-overview