BOLA Finding with API Traffic Anomaly

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


Detects applications with open BOLA/IDOR findings (OWASP API1, API3, API5) that also show anomalous 4xx error traffic in Azure API Management. Correlates StratoSecure BOLA findings with APIM gateway error spikes.

Attribute Value
Type Analytic Rule
Solution StratoSecure
ID 3c5be96e-2eeb-439a-9856-1c23aa72cfdd
Severity High
Status Available
Kind Scheduled
Tactics InitialAccess, Discovery
Techniques T1190, T1083
Required Connectors StratoSecurePush
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
ApiManagementGatewayLogs ✓ ✗ ✗
StratoSecure_Findings_CL ? ✓ ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Analytic Rules · Back to StratoSecure