Sagan critical stable other

[IMPERVA] Bot Access Control Detected and Not Blocked

[IMPERVA] Bot Access Control Detected and Not Blocked

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[IMPERVA] Bot Access Control Detected and Not Blocked"; program:Incapsula; content:"
| 7c
| Bot Access Control
| 7c
| "; content:"act=REQ_PASSED"; reference:url,https://docs.imperva.com/bundle/cloud-application-security/page/more/log-file-structure.htm; classtype:trojan-activity; sid:5014189; rev:1; metadata:deployment Endpoint,affected_product NONE,affected_version NONE,mitigation NONE,deprecation_reason NONE,tag NONE, created_at 2024_01_18, updated_at 2024_01_18, mitre_tactic_id TA0001, mitre_technique_id T1190;)

Field Validations

Loading…

Comments (0)

Loading comments...