Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
2
Contributors
2
Categories
2
2
Platforms
2
Products / Services
2
MITRE Techniques
2
2
CVEs
71
71
64
58
49
This rule detects attempts to access cloud instance metadata services (specifically Google Cloud's metadata service) initiated by processes commonly associated with Adobe Campaign Classic (nlserver or w3wp.exe). Such requests are often indicative of Server-Side Request Forgery (SSRF) attempts, where an attacker leverages an application-level vulnerability to probe internal cloud infrastructure for sensitive data or credentials.
This rule detects attempts to access cloud instance metadata services (specifically Google Cloud's metadata service) initiated by processes commonly associated with Adobe Campaign Classic (nlserver or w3wp.exe). Such requests are often indicative of Server-Side Request Forgery (SSRF) attempts, where an attacker leverages an application-level vulnerability to probe internal cloud infrastructure for sensitive data or credentials.
