How to identify rate limiting from technical perspective - WAAS - OWASP API Top 10

[SMutlu]

Hi All,

I saw that, WAAS have new feature for detect risk path from WASP API Top 10 list, but there is no any details about detection mechanism and request/response details. It only shows as risky but I need more details to understand alarms are f/p or not.

As WAAS haven't scan the API definitions, how does prisma cloud compute detect API rate limiting capabilities from technical perspective?

How can I investigate the case or traffic that identifies as WASP API Top 10 risk on paths that are found to be risky?

Kind Regards

@EGunay 

Prisma Cloud 

[stumiki]

Please review the article shared - https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/waas_dos_prote...