cf.waf.content_scan.num_malicious_obj

cf.waf.content_scan.num_malicious_obj

cf.waf.content_scan.num_malicious_obj Integer

The number of malicious content objects detected in the request (zero or greater).

Requires a Cloudflare Enterprise plan with malicious uploads detection.

Example usage:

# Check if requests to a specific endpoint contain more than two malicious content objects
cf.waf.content_scan.num_malicious_obj > 2 and http.request.uri.path eq "/upload"

Categories:

• Request