Apache - Multiple server errors from single IP

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects multiple server errors from one source in short timeframe

Attribute Value
Type Analytic Rule
Solution ApacheHTTPServer
ID 1bf246a2-3af9-11ec-8d3d-0242ac130003
Severity Medium
Status Available
Kind Scheduled
Tactics Impact, InitialAccess
Techniques T1498, T1190, T1133
Required Connectors CustomLogsAma
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
ApacheHTTPServer_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to ApacheHTTPServer