Update MaliciousWAFSessions.yaml
Changing severity
This commit is contained in:
Родитель
80d79a7631
Коммит
52a8be5ab5
|
@ -6,7 +6,7 @@ description: |
|
|||
a given client IP and hostname calls for further investigation of the WAF data in that session, due to the significantly high number
|
||||
of blocked requests and a few unobstructed logs which may be malicious but have passed undetected through the WAF. The successCode
|
||||
variable defines what the detection thinks is a successful status code, and should be altered to fit the environment.’
|
||||
severity: Low
|
||||
severity: Medium
|
||||
requiredDataConnectors:
|
||||
- connectorId: WAF
|
||||
dataTypes:
|
||||
|
|
Загрузка…
Ссылка в новой задаче