SOC167 EventID:117 — LS Command Detected in Requested URL — letsdefend.io

SOC167 EventID:117 — LS Command Detected in Requested URL — letsdefend.io

Here is the provided alert report below.

EventID :117
Event Time :Feb, 27, 2022, 12:36 AM
Rule :SOC167 - LS Command Detected in Requested URL
Level :Security Analyst
Hostname :EliotPRD
Destination IP Address :188.114.96.15
Source IP Address :172.16.17.46
HTTP Request Method :GET
Requested URL :https://letsdefend.io/blog/?s=skills
User-Agent :Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0
Alert Trigger Reason :URL Contains LS
Device Action :Allowed

The alert was triggered because system …

blue team letsdefendio soc