QuestionQ146

VerifiedIncident Detection and Triage

Jony, a security analyst, identified the events shown below while monitoring IIS logs.

Question Image

What does this event log show?

Explanation

The payload appends SQL Server commands to an application parameter and uses WAITFOR DELAY to create a measurable delay. This is a time-based blind SQL injection technique used to infer database data through response timing.

Community Discussion

No comments yet. Be the first to start the discussion!