Splunk Queries for Detecting Anomalous URIs in Web Traffic
Prior to having a presence on the network, attackers are unlikely to be able to disguise web shell traffic as typical traffic for a targeted web server. In these cases, requests to the web shell are likely to have an...
