User Tools

Site Tools


pfsense:suricata:alerts:suricata_http_request_unrecognized_authorization_method

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

pfsense:suricata:alerts:suricata_http_request_unrecognized_authorization_method [2021/01/15 11:47] – created peterpfsense:suricata:alerts:suricata_http_request_unrecognized_authorization_method [2021/01/18 09:10] (current) peter
Line 5: Line 5:
 HTTP Basic Authentication event can be detected by the presence of the **Authentication** header in the POST request, followed by the word **Basic** and a base64 encoded string that is the username and password without any further encryption/obfuscation. HTTP Basic Authentication event can be detected by the presence of the **Authentication** header in the POST request, followed by the word **Basic** and a base64 encoded string that is the username and password without any further encryption/obfuscation.
  
-Keep.+False positive.
  
 ---- ----
Line 14: Line 14:
 192.168.1.112    50581 40.100.29.8    80 192.168.1.112    50581 40.100.29.8    80
 </code> </code>
 +
 +----
 +
 +===== Suppress =====
 +
 +<code>
 +#SURICATA HTTP Request unrecognized authorization method
 +suppress gen_id 1, sig_id 2221034
 +</code>
 +
pfsense/suricata/alerts/suricata_http_request_unrecognized_authorization_method.1610711271.txt.gz · Last modified: 2021/01/15 11:47 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki