Lucas Pinho
@lucaslapinhoCompletionist
0 followers9 downloads111 copies0 likes282 views
62 detections
Filters
Last updated
All Time
Detection languages
61
1
Categories
18
16
6
6
5
Platforms
20
11
9
8
7
Products / Services
11
10
7
5
5
MITRE Techniques
12
12
11
10
9
Imperva Site WAF Protection Disabled
Cortex XDR
Detects an audit event in Imperva Cloud WAF where a site's protection state is changed to disabled. Disabling WAF protection reduces the security posture of the protected application and may indicate an attempt to impair defensive controls.
Detects FortiGate antivirus events classified as infected where the antivirus action indicates that the file was allowed or monitored rather than blocked. This condition may expose downstream systems to a file identified by the FortiGate antivirus engine and warrants validation of the security profile, destination host, and file context.
Page 7 of 7