ML Rules

Download 52
Last updated Jul 21, 2024

ml-scan-http-request

Detect web application attack. You must input a raw_data field that contains both HTTP headers and body.

ml-scan-http-request

Output Fields

FieldTypeNameDescription
verdictStringVerdictattack or benign
tagsStringTagsCharacteristics of raw_data. e.g. #xss #sql_injection
cveStringCVEDetected CVE ID by using signature database.
highlightsStringHighlightsKey string parts of raw_data separated by new line.
decoded_stringsStringDecoded stringsURL decoded or deobfuscated strings of highlights.