This guide offers a reference that maps common security use cases and misconfigurations to their matching detection templates. These templates let you rapidly spot, classify, and fix vulnerabilities throughout your infrastructure.
How the Scanner Works
Our application scanner relies on internally developed detection mechanisms to keep your servers protected. It continually collects vulnerability data from multiple trusted sources and compares it with the applications installed on your servers.
The scanner combines threat intelligence from the National Vulnerability Database (NVD), Red Hat, and UTM Stacked Threat Intelligence so you maintain the latest safeguards against known vulnerabilities.
flowchart LR
A["NVD"] --> D["Detection Engine"]
B["Red Hat"] --> D
C["UTM Threat Intel"] --> D
D --> E["Server Applications"]
E --> F["Vulnerability Matches"]Detection Templates Reference
Based on what you need to detect, you can use particular templates. The following is a mapping of common security use cases to their suggested detection templates.
| Security Use Case | Detection Template |
|---|---|
| Detect known CVEs | CVE-2021-44228 (Log4Shell) |
| Identify Out-of-Band vulnerabilities | Blind SQL Injection via OOB |
| SQL Injection detection | Generic SQL Injection |
| Cross-Site Scripting (XSS) | Reflected XSS Detection |
| Default or weak passwords | Default Credentials Check |
| Secret files or data exposure | Sensitive File Disclosure |
| Identify open redirects | Open Redirect Detection |
| Detect subdomain takeovers | Subdomain Takeover Templates |
| Security misconfigurations | Unprotected Jenkins Console |
| Weak SSL/TLS configurations | SSL Certificate Expiry |
| Misconfigured cloud services | Open S3 Bucket Detection |
| Remote code execution (RCE) | RCE Detection Templates |
| Directory traversal attacks | Path Traversal Detection |
| File inclusion vulnerabilities | Local/Remote File Inclusion |
If you are setting up a new environment, we recommend starting with the Default Credentials Check and SSL Certificate Expiry templates, because they detect some of the most frequent and readily exploited misconfigurations.
Next Steps
Prepared to put these templates into action? Review our guides on conducting your first scan.