FortiSandbox JRPC Path Traversal Encoding

Daniel Jeremiah@daniyyell

•updated Jun 19, 2026•0•0•3

This rule detects attempts at path traversal within JRPC (JSON-RPC or RPC) requests targeting FortiSandbox, including plain, encoded, double-encoded, and mixed-separator path traversal patterns. It focuses on network events and provides causality fields for investigation.