Document toolboxDocument toolbox

Web detections

Client 4xx Errors in a web server can be an indicator of an attack occurring, authentication bypass, injection, etc.

Source table → web.all.access

Detects the exploitation attempt of the vulnerability found in F5 BIG-IP and described in CVE-2020-5902.

Source table → web.all.access