Sagan high stable other

[APACHE] Mod_Security Access denied

[APACHE] Mod_Security Access denied

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[APACHE] Mod_Security Access denied"; meta_content: "%sagan%",modsecurity,mod_security,mod_security-message; content: "access denied"; nocase; default_proto:tcp; default_dst_port: $HTTP_PORT; classtype: web-application-attack; program: *apache*
| httpd; parse_src_ip: 1; sid:5000165; rev:9; metadata: mitre_technique_id T1059, mitre_technique_id T1100;)

Field Validations

Loading…

Comments (0)

Loading comments...