writing-skills
writing-skills
Use when creating new skills, editing existing skills, or verifying skills work before deployment
detecting-sql-injection-via-waf-logsAnalyze WAF (ModSecurity/AWS WAF/Cloudflare) logs to detect SQL injection attack campaigns. Parses ModSecurity audit logs and JSON WAF event logs to identify SQLi patterns (UNION SELECT, OR 1=1, SLEEP(), BENCHMARK()), tracks attack sources, correlates multi-stage injection attempts, and generates incident reports with OWASP classification.
Independent GitHub snapshot · Automated classification · Original documentation governs