Detect Local File Inclusion(LFI) in web requests (ASIM Web Session)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

LFI vulnerabilities allow an attacker to read (and sometimes execute) files on the victim machine. This can be very dangerous because if the web server is misconfigured and running with high privileges, the attacker may gain access to sensitive information

Attribute	Value
Type	Analytic Rule
Solution	Web Session Essentials
ID	7bb55d05-ef39-4a40-8079-0bc3c05e7881
Severity	High
Status	Available
Kind	Scheduled
Tactics	InitialAccess, Execution
Techniques	T1190, T1133, T1059
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
Watchlist	✓	✗	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Analytic Rules · Back to Web Session Essentials