FortyTwoCrunchAPIProtectionV2_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (18 columns)

Source: Connector definition

Column Name Type Description
ApiId string Unique identifier of the API definition in the 42Crunch platform
DestinationPort int Destination port number on the API server
ErrorMessage string Error message returned by the API firewall when the request is blocked or fails validation
Errors string Detailed error information in JSON format from the API firewall
EventType string Type of the log event recorded by the API firewall (e.g., request, block, error)
Hostname string Hostname of the API server receiving the request
InstanceName string Name of the 42Crunch API Firewall instance that processed the request
NonBlockingMode bool Indicates whether the 42Crunch firewall is running in non-blocking (observation) mode. True means requests are logged but not blocked.
Query string Query string parameters of the API request
RequestHeader string HTTP request headers in JSON format
ResponseHeader string HTTP response headers in JSON format
SourceIp string Source IP address of the API client
SourcePort int Source port number of the API client connection
Status int HTTP response status code returned by the API firewall (e.g., 200, 401, 429, 500)
TimeGenerated datetime
Timestamp datetime Timestamp of the API request recorded by the 42Crunch firewall
UriPath string URI path of the API request
Uuid string Unique identifier (UUID) for the log event

Solutions (1)

This table is used by the following solutions:

Connectors (1)

This table is ingested by the following connectors:

Connector Selection Criteria
42Crunch API Protection (Push Connector via Codeless Connector Framework)

Content Items Using This Table (12)

Analytic Rules (11)

In solution 42Crunch API Protection:

Analytic Rule Selection Criteria
API - API Scraping
API - Account Takeover
API - Anomaly Detection
API - BOLA
API - Invalid host access
API - JWT validation
API - Kiterunner detection
API - Password Cracking
API - Rate limiting
API - Rate limiting
API - Suspicious Login

Workbooks (1)

In solution 42Crunch API Protection:

Workbook Selection Criteria
42CrunchAPIProtectionWorkbook

Parsers Using This Table (1)

Other Parsers (1)

Parser Solution Selection Criteria
FortyTwoCrunchAPIProtection 42Crunch API Protection

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index