Detectionmediumstable

Python SQL Exceptions

Generic rule for SQL exceptions in Python according to PEP 249

Convert In Phoenix Studio

Open this Sigma rule in the converter with the YAML preloaded and ready for backend selection.

Thomas PatzkeCreated Sat Aug 12Updated Tue Sep 0119aefed0-ffd4-47dc-a7fc-f8b1425e84f9application

Log Source

pythonapplication

Productpython← raw: python

Categoryapplication← raw: application

Detection Logic

detection:
    keywords:
        - DataError
        - IntegrityError
        - ProgrammingError
        - OperationalError
    condition: keywords

False Positives

Application bugs

References

MITRE ATT&CK

Tactics

Techniques

Rule Metadata

Rule ID

19aefed0-ffd4-47dc-a7fc-f8b1425e84f9

Status

stable

Level

medium

Type

Detection

Created

Sat Aug 12

Modified

Tue Sep 01

Author

Path

rules/application/python/app_python_sql_exceptions.yml

Raw Tags

attack.initial-accessattack.t1190