Configures ModSecurity WAF with OWASP CRS for web app logging, tunes rules to reduce false positives, analyzes audit logs for attacks, and implements custom SecRules for app-specific threats.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills-zh:implementing-web-application-logging-with-modsecurityThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
ModSecurity 是一个开源 WAF(Web 应用防火墙)引擎,可与 Apache、Nginx 和 IIS 协同工作。OWASP
ModSecurity 是一个开源 WAF(Web 应用防火墙)引擎,可与 Apache、Nginx 和 IIS 协同工作。OWASP 核心规则集(CRS)提供通用攻击检测规则,覆盖 SQL 注入、XSS、RCE、LFI 及其他 OWASP Top 10 攻击。 ModSecurity 在审计日志中记录完整的请求/响应数据以供取证分析,并生成可接入 SIEM 平台的告警。
ModSecurity: Warning. Pattern match "(?:union\s+select)" [file "/etc/modsecurity/crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [msg "SQL Injection Attack Detected via libinjection"] [severity "CRITICAL"]
npx claudepluginhub killvxk/cybersecurity-skills-zhConfigures ModSecurity WAF with OWASP CRS for web application logging, tunes rules to reduce false positives, analyzes audit logs for attack detection, and implements custom SecRules for application-specific threats.
Configures ModSecurity WAF with OWASP CRS for web application logging, tunes rules to reduce false positives, analyzes audit logs for attack detection, and implements custom SecRules for application-specific threats.
Configures ModSecurity WAF with OWASP CRS for web application logging, tunes rules to reduce false positives, analyzes audit logs for attacks, and implements custom SecRules.