Breadcrumbs

Anomaly Attack Messages

Classification

Rule Name

Rule Type

Common Event

Classification

Anomaly Attack Messages

Base Rule

General Attack Activity

Attack

Web Scraping Attack Started

Sub Rule

General Attack Activity

Attack

Web Scraping Attack Ongoing

Sub Rule

General Attack Activity

Attack

Web Scraping Attack Ended

Sub Rule

General Attack Activity

Attack

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<severity>

Text/String

N/A

<vmid>

Number

N/A

<sip>

IP Address

N/A

<dname>

Text/String

N/A

<sport>

Number

N/A

<session>

Number

N/A

<process>

Text/String

N/A

<subject>

Text/String

N/A

<group>

Text/String

N/A

<tag1>

Text/String

N/A

<tag2>

Text/String