ASM attack signature Patterns

I do not see anywhere to view detailed pattern of an ASM signature. I think that was business secret. But you can define your own attack signature here: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-bot-and-attack-signatures-13-0-0/4.html

Yes, it is possible. The signatures are stored in internal MySQL database and F5 provides a way to access it described in the knowledgebase article K11680.

See my detailed answer on DevCentral here:

https://devcentral.f5.com/questions/copying-system-supplied-attack-signatures-for-modification-49449

Hope this is useful (I get this question asked a lot).

Sam