ImpervaWAFCloudV2_CL

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index

Attribute Value
Ingestion API Supported ✓ Yes

Contents

Schema (54 columns)

Source: KQL validation test schema

Column Name Type
Act string
AdditionalReqHeaders string
AdditionalResHeaders string
AdditionalRuleInfo string
App string
AttackName string
AttackSeverity string
CapSupport string
CCode string
CiCode string
ClApp string
ClAppSig string
Cn1 string
CoSupport string
Cpt string
Customer string
DeliveryRuleDetails string
DeviceExternalId string
DeviceFacility string
DeviceVersion string
Dproc string
End string
EventProduct string
EventType string
EventVendor string
FileId string
FilePermission string
FileType string
In string
JavascriptSupport string
Latitude string
LogVersion string
Longitude string
PostBody string
QStr string
Ref string
Request string
RequestClientApplication string
RequestMethod string
RuleName string
SignatureId string
SIP string
SiteId string
SiteTag string
SourceServiceName string
Spt string
Src string
Start string
Suid string
Tag string
TimeGenerated datetime
Ver string
VID string
Xff string

Schema References

Official Microsoft Learn documentation for field/column information:

Solutions (1)

This table is used by the following solutions:

Connectors (2)

This table is ingested by the following connectors:

Connector Selection Criteria
Imperva Cloud WAF (via Codeless Connector Framework)
Imperva Cloud WAF

Content Items Using This Table (21)

Analytic Rules (10)

In solution ImpervaCloudWAF:

Analytic Rule Selection Criteria
Imperva - Abnormal protocol usage
Imperva - Critical severity event not blocked
Imperva - Forbidden HTTP request method in request
Imperva - Malicious Client
Imperva - Malicious user agent
Imperva - Multiple user agents from same source
Imperva - Possible command injection
Imperva - Request from unexpected IP address to admin panel
Imperva - Request from unexpected countries
Imperva - Request to unexpected destination port

Hunting Queries (10)

In solution ImpervaCloudWAF:

Hunting Query Selection Criteria
Imperva - Applications with insecure web protocol version
Imperva - Non HTTP/HTTPs applications
Imperva - Rare applications
Imperva - Rare client applications
Imperva - Rare destination ports
Imperva - Top applications with error requests
Imperva - Top destinations with blocked requests
Imperva - Top sources with blocked requests
Imperva - Top sources with error requests
Imperva - request from known bots

Workbooks (1)

In solution ImpervaCloudWAF:

Workbook Selection Criteria
Imperva WAF Cloud Overview

Parsers Using This Table (1)

Other Parsers (1)

Parser Solution Selection Criteria
ImpervaWAFCloud ImpervaCloudWAF

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Tables Index