Azure WAF operations
Read WAF blocks in KQL, qualify false positives, then add targeted OWASP/CRS exclusions or custom rules with evidence.
From noisy blocks to defensible WAF changes.
- 01 Azure WAF: read Application Gateway blocks with KQL without chasing every layer
- 02 WAF and KQL: identify a false positive before creating an exclusion
- 03 Azure WAF: add an OWASP/CRS exclusion without weakening all protection
- 04 Azure WAF: when to use custom rules before managed OWASP rules
- 05 Azure WAF: frame an emergency custom rule without losing evidence