Deploy a Web Application Firewall (WAF)

Info

ID: MS-M7006
MITRE mitigation: M1037

Deploy a Web Application Firewall to inspect and filter HTTP traffic to web applications. WAF rules can block common attack vectors including SQL injection, cross-site scripting (XSS), command injection, and other OWASP Top 10 vulnerabilities.

Techniques Addressed by Mitigation

ID	Name	Use
MS-TA7002	Application vulnerability	Use WAF rules to block common attack vectors like SQL injection, XSS, and command injection.
MS-TA7006	Serverless trigger injection	Use WAF or API Gateway validation to filter malicious inputs before they reach serverless functions.
MS-TA7009	Application exploit (RCE)	Block exploit attempts targeting deserialization, template injection, or command execution vulnerabilities.