detecting-api-enumeration-attacks - Detect API Enumeration and BOLA Attacks
Detects API enumeration, BOLA, and IDOR patterns by analyzing sequential identifier access, authorization failures, and abnormal request rates.
Tags
Updated: 2026-09-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Analyze API access logs
- Detect sequential ID probing
- Detect UUID enumeration
- Detect parameter tampering
- Identify authorization failure patterns
- Generate detection alerts
Inputs
- API access logs
- Authorization model
- Object identifier schemes
- SIEM event data
Outputs
- Enumeration detection alerts
- SIEM detection queries
- Detection rules
- Analysis results
Requirements
- API gateway or reverse proxy logging
- SIEM platform
- API server log access
- API-capable WAF
- Authorization model knowledge