HI,
can I get help on splunk query to find attacks on my external website like Cross site script, SQLi, RFI etc.
Hi,
Its a little difficult to give you full searches not understanding your web logging / auditing policies. However, take a look at this for ideas and inspiration.
https://conf.splunk.com/files/2017/slides/splunk-and-credit-karma-the-road-to-web-application-defens...
Hope it helps!
