HIDS 62816
From Atomicorp Wiki
| Rule 1 | |
|---|---|
| Status | Active |
| Alert Message | Webserver event |
Contents |
[edit] Description
The webserver has returned a 500 error code. This is an internal server error
[edit] What you should do
This means the webserver is returning a hard internal error message, it is the highest severity error message a webserver can return. The causes for this include failing hardware, misconfigured settings, lack of resources, and indicators of compromise. Investigate the webserver and see if there are more detailed error messages that can help you identify the root cause.
[edit] Troubleshooting
[edit] False Positives
There are no false positives with this rule.
[edit] Tuning Guidance
There is no guidance for tuning this rule, this is a generic webserver error and the rule should not be disabled.
[edit] Additional Information
[edit] Support
If you are unsure about how to respond to this alert, please contact Atomicorp support. We're here to help you!
[edit] Similar Rules
None.
[edit] Knowledge Base Articles
None.
[edit] Outside References
None.
