Brute force
A Brute Force incident surfaces a combination of audit events that indicate a protected resource is potentially being affected by an attempted DoS.
Investigation
In the following incident, you can see that a container received a flood of attempted actions to the extent that the Web Application and API Security (WAAS) blocked the source.
Review the WAAS audit logs to determine any further impact:
Additionally, review the logs of potentially affected applications to determine if there was any further impact.
Mitigation
Ensure that WAAS rules provide protection for exposed services.