watchMedium
SQLi through a SOC's eyes: the 10 patterns to spot in your logs
SQL injection is the most heavily taught vulnerability in pentesting, but rarely from the detection side. This article covers 10 SQLi patterns to spot in your HTTP and SQL logs, and why SIEM correlation is what separates a false positive from an active attack.
#sqli#sql-injection#soc
6 minSeptember 1, 2026
watchEasy
IDOR: the OWASP #1 vulnerability nobody takes seriously
IDOR is the most basic flaw in the OWASP Top 10, and also one of the most exploited. This article covers the vulnerability, recent cases in France (litige.fr, ÉduConnect), why it still persists in 2026, how to defend against it, and how a SOC actually detects it.
#idor#owasp#access-control
8 minAugust 23, 2026