Logpresso raises alerts after re-validating WAPPLES events that were processed in DETECT mode, alerting only when the payload indicates a confirmed high-risk exploit.
Stream
Priority High
attack
T1190
Logpresso re-validates WAPPLES detection-mode alerts triggered by error status codes (such as 404) and accurately surfaces vulnerability scanning attempts.
Stream
Priority Low
attack
T1595.002