cancel
Showing results for 
Search instead for 
Did you mean: 

WAF Script Library to make a personal Baseline Protection Handler

stubbez
Occasional Visitor

WAF Script Library to make a personal Baseline Protection Handler

Dear All,
the path traversal rule in Baseline Protection is generating a lot of false positives because the regex include home (and so everytime someone goes in a Home page is triggered). anyway I don't want to remove this signature because is usefull.

the idea is to put off the rule in the Baseline ProtectionHandler but to create a traffic script that search for the very same regex without home and log it  in log file.

 

Do you have any Idea how to do this?

 

thank you