medium10 pts · first answer countswazuhincident-response

File integrity alert on a web server

Wazuh file integrity monitoring alerts that a new file shell.php appeared in /var/www/html/uploads/ on a production web server. What is the best first step?

A.Delete the file and close the alertB.Restart the web server to clear the problemC.Ignore it because uploads are allowed in that folderD.Preserve the file and web access logs, check for requests to it, and treat it as a possible web shell

Discussion 0

Join free to post in the discussion.

File integrity alert on a web server

Discussion 0

Related questions