Custom Rules

web-application-attack

• "Access to SharePoint Current User API"

• "Suspicious X-PROOF_TOKEN Header Detected (CVE-2023-29357)"

• "Suspicious SharePoint API Endpoint Access"

• "Suspicious Base64 Pattern in HTTP Request"

• "Potential SharePoint JWT Token Bypass Attempt (CVE-2023-29357)"

• "Adobe Coldfusion CVE-2023-38203 Exploit Attempt"