Platform / product

spring Sigma detection rules

2 community-maintained Sigma detection rules in the library target the spring platform, covering log sources such as application. Browse by severity, inspect the detection logic and MITRE ATT&CK mapping, and open the original Sigma YAML before using a rule in your detection engineering workflow.

2 rules

Log sources

application2

Severity

high1
medium1

Potential SpEL Injection In Spring Framework
high
Detects potential SpEL Injection exploitation, which may lead to RCE.
spring · application
Spring Framework Exceptions
medium
Detects suspicious Spring framework exceptions that could indicate exploitation attempts
spring · application

Log sources

Severity

Potential SpEL Injection In Spring Framework

Spring Framework Exceptions