Azure azure_web_application_firewall Mappings

This control can protect web applications from active scanning by an adversary. Because this protection is specific to web applications (although frequent targets) and not other application types, it has been scored as Partial.

Focuses on web vulnerability scanning of OWASP Core Rule Set (CRS).

This control can protect web applications from common attacks (e.g. SQL injection, XSS).

This control can detect common web application attack vectors.

This control can protect web applications from network service scanning by an adversary. Because this protection is specific to web applications (although frequent targets) and not other application types enumerated in the procedure examples of this technique (e.g. Active Directory), it has been scored as Partial.

This control can detect network service scanning of web applications by an adversary. Because this detection is specific to web applications (although frequent targets) and not other application types enumerated in the procedure examples of this technique (e.g. Active Directory), it has been scored as Partial.

This control can protect against one of the sub-techniques of this technique while not providing protection for the remaining, resulting in a Minimal overall score.

This control can detect one of the sub-techniques of this technique while not providing detection for the remaining, resulting in a Minimal overall score.

This control can protect web applications from protocol attacks that may be indicative of adversary activity.

This control can detect protocol attacks targeting web applications that may be indicative of adversary activity.