Vendor: Imperva

July 25, 2023 · View on GitHub

Product: Incapsula

Use-Case: Phishing

RulesModelsMITRE TTPsEvent TypesParsers
10222
Event TypeRulesModels
web-activity-allowedT1071.001 - Application Layer Protocol: Web ProtocolsT1566.002 - Phishing: Spearphishing Link
A-WEB-Phishing: Asset has accessed a domain suspected to be a phishing domain.
web-activity-deniedT1071.001 - Application Layer Protocol: Web ProtocolsT1566.002 - Phishing: Spearphishing Link
A-WEB-Phishing: Asset has accessed a domain suspected to be a phishing domain.