- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
Tactic:
Detect Command Injection attempts on web services executing shell commands. Such security activity generally indicates that an attacker is trying to exploit a potential command injection vulnerability and execute malicious code on your server.
Monitor command injection attempts (@appsec.security_activity:attack_attempt.command_injection
) on routes executing shell commands (@_dd.appsec.enrichment.has_shell:true
).
Excludes 404 due to excessive noise found during testing.
Monitor the presence of errors tied to command execution (@_dd.appsec.enrichment.spans_with_error:system
) to detect potential failed exploits.
Generate an Application Security Signal with Medium
severity if attacks on routes executing commands are found.
Raise the severity to High
if errors were generated on the same trace.