{
  "ocm": "1",
  "id": "mukul975-anthropic-cybersecurity-skills-implementing-web-a3ca4d",
  "kind": "skill",
  "name": "implementing-web-application-logging-with-modsecurity",
  "description": "Configure ModSecurity WAF with the OWASP Core Rule Set (CRS) for web application audit logging, tuning SecRuleEngine, SecAuditEngine, and CRS paranoia levels to reduce false positives, and writing custom SecRules for application-specific threats. Use when deploying or tuning a ModSecurity WAF, analyzing audit logs for attack detection, or reducing CRS false positives.",
  "publisher": "mukul975",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "modsecurity",
      "waf",
      "crs",
      "owasp",
      "web-security",
      "audit-logging",
      "rule-tuning",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Configure ModSecurity WAF with the OWASP Core Rule Set (CRS) for web application audit logging, tuning SecRuleEngine, SecAuditEngine, and CRS paranoia levels to reduce false positives, and writing custom SecRules for application-specific threats. Use when deploying or tuning a ModSecurity WAF, analyzing audit logs for attack detection, or reducing CRS false positives."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/mukul975/anthropic-cybersecurity-skills",
      "path": "skills/implementing-web-application-logging-with-modsecurity/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/mukul975/anthropic-cybersecurity-skills/blob/HEAD/skills/implementing-web-application-logging-with-modsecurity/SKILL.md",
      "key": "mukul975/anthropic-cybersecurity-skills/skills/implementing-web-application-logging-with-modsecurity/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# Implementing Web Application Logging with ModSecurity\n\n## Overview\n\nModSecurity is an open-source WAF engine that works with Apache, Nginx, and IIS. The OWASP\nCore Rule Set (CRS) provides generic attack detection rules covering SQL injection, XSS,\nRCE, LFI, and other OWASP Top 10 attacks. ModSecurity logs full request/response data in\naudit logs for forensic analysis and generates alerts that feed into SIEM platforms.\n\n\n## When to Use\n\n- When deploying or configuring implementing web application logging with modsecurity capabilities in your environment\n- When establishing security controls a",
  "cost": {
    "context_tokens": 397
  }
}