Imperva Cyber Community

Hello Imperva Community Members,

Greetings for the day,

I have a requirement in Database Activity Monitoring (DAM)

An alert should be received and the user/query should be blocked for an UPDATE SQL query executed without where condition, 

Is there a way we can achieve that?

i Have tried the following

   Operations=> Update
   SQL Exception String=> Exclude All=>  Value Where
   SQL Exception => Generated/Not Generated (Tested for both)

I have tried few other combinations with Columns and custom command groups but not luck

Would appreciate if some one could provide guidance regarding the same

#DatabaseActivityMonitoring 

#DatabaseActivityMonitoring

------------------------------
Bharath Patil
Manager | DAM admin
Karnataka Bank Ltd.
Bengaluru
------------------------------

Hi Bharath,

Please follow the steps below and let me know it helps you.

Firstly, go to "Setup>Global Objects>Generic Dictionary Groups" path and add new dictionary from scratch with only giving name. After add an entry in it and type part="where" for Pattern value like below.

Then add new DB Service Custom security policy with the following parameters and apply to related service.

------------------------------
Cezmi Cal
Consultant
Barikat Internet Guvenligi Bilisim Ticaret A.S.
Ankara
------------------------------

Hello Cezmi Cal,

I am Glad to report that the solution provided by you is working perfectly,

Thanks for your assistance Buddy, Cheers!!

------------------------------
Bharath Patil
Manager
Karnataka Bank Ltd.
Bengaluru
------------------------------

Original Message:
Sent: 06-13-2024 05:05
From: Cezmi Cal
Subject: Alert to be generated Based on a SQL Query

Hi Bharath,

Please follow the steps below and let me know it helps you.

Firstly, go to "Setup>Global Objects>Generic Dictionary Groups" path and add new dictionary from scratch with only giving name. After add an entry in it and type part="where" for Pattern value like below.

Then add new DB Service Custom security policy with the following parameters and apply to related service.

------------------------------
Cezmi Cal
Consultant
Barikat Internet Guvenligi Bilisim Ticaret A.S.
Ankara
------------------------------

Hi Bharath,

I'm happy it worked out the way you wanted it to.

Please mark the answer as "Best Answer" so that others can quickly reach the solution.

------------------------------
Cezmi Cal
Consultant
Barikat Internet Guvenligi Bilisim Ticaret A.S.
Ankara
------------------------------

Original Message:
Sent: 06-13-2024 06:38
From: Bharath Patil
Subject: Alert to be generated Based on a SQL Query

Hello Cezmi Cal,

I am Glad to report that the solution provided by you is working perfectly,

Thanks for your assistance Buddy, Cheers!!

------------------------------
Bharath Patil
Manager
Karnataka Bank Ltd.
Bengaluru
------------------------------


Original Message:
Sent: 06-13-2024 05:05
From: Cezmi Cal
Subject: Alert to be generated Based on a SQL Query

Hi Bharath,

Please follow the steps below and let me know it helps you.

Firstly, go to "Setup>Global Objects>Generic Dictionary Groups" path and add new dictionary from scratch with only giving name. After add an entry in it and type part="where" for Pattern value like below.

Then add new DB Service Custom security policy with the following parameters and apply to related service.

------------------------------
Cezmi Cal
Consultant
Barikat Internet Guvenligi Bilisim Ticaret A.S.
Ankara