Forum Discussion
AARM00502
Altostratus
AltostratusWindows PowerShell "cp" execution attempt (Parameter)
Hello everyone. In a security policy I am alarmed by an attack signature due to the detection of "cp", this identifies it as a command, however, it is part of the character string that is used to fil...
zamroni777
Nacreous
Nacreousensure that you select correct server tech entries in the asm profile, e.g. dont include windows if the webserver is not windows based.
if above is correctly done but you still get false positive then you need to allow that particular traffic.
i had similar thing on waf config for car dealership.
there were sql injection false positives because of many "select" in the submited web forms.