id: aspnet-framework-exceptions

info:
  name: ASP.NET Framework Exceptions
  author: Aayush Dhakal
  severity: info
  description: Detects suspicious ASP.NET framework exceptions that could indicate exploitation attempts
  reference:
    - https://docs.microsoft.com/en-us/dotnet/api/system.web.httpexception
  tags: file,logs,aspnet

file:
  - extensions:
      - all

    extractors:
      - type: regex
        name: exception
        part: body
        regex:
          - 'HttpException'
          - 'InvalidOperationException'
          - 'UnauthorizedAccessException'
          - 'NotFound'
# digest: 490a0046304402201b45d54e3fa992f0c5761d05deb9bd3f23e478def31d0f83f0e49c8ed731a8560220792bec36d68fefbb8dc3e7d201f9152e1b7c9fd3d2fb0d0c0a395a595bcf1b30:922c64590222798bb761d5b6d8e72950