Develop Use Cases for Imperva Securesphere (web application firewall) data in Splunk (to include ThreatRaddar).

Use the following web app attacks.

use case 1=Cross-Site Scripting (XSS)

use case 2=Broken Authentication and Session Management.

use case 3=Insecure Direct Object References.

use case 4=Cross-Site Request Forgery (CSRF)

use case 5=Security Misconfiguration.

use case 6=Insecure Cryptographic Storage.

use case 7=remote file inclusion

Use a table format: for Example.

use case name | brute force attempt detection.

Description | This use case track brute force login attempts.

action | - create coloration detection rules; -create dashboards; - create alerts; - monitor attacker activity

actors | analysis L1 and L2

priority | high