IBM Security QRadar

 View Only

Customize rule to detect configuration changes on web page

  • 1.  Customize rule to detect configuration changes on web page

    Posted Thu May 02, 2019 01:14 AM
    Hi 
    Is it impossible? If I would like to detect web server when someone try to change content on web page.

    In case of I had LAMP server. there's index.php in /var/www/html. If someone try to overwirte file index.php, Can we detect on JSA by using custome rule?

    ------------------------------
    MAC Strater
    ------------------------------