You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/page-shield/detection/monitor-connections-scripts.mdx
+5-10Lines changed: 5 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -25,16 +25,14 @@ To review the resources detected by Cloudflare:
25
25
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
26
26
27
27
2. Go to the client-side resources page:
28
-
29
28
- Old dashboard: Go to **Security** > **Page Shield**.
30
29
- New security dashboard: Go to **Security** > **Web assets** > **Client-side resources** tab.
31
30
32
31
3. Review the list of scripts, connections, and cookies for your domain. To apply a filter, select **Add filter** and use one or more of the available options:
33
-
34
-
-**Script**: Filter scripts by their URL.
35
-
-**Connection**: Filter connections by their target URL. Depending on your [configuration](/page-shield/reference/settings/#connection-target-details), it may search only by target hostname.
36
-
-**Host**: Look for scripts appearing on specific hostnames, or connections made in a specific hostname.
37
-
-**Page** (requires a Business or Enterprise plan): Look for scripts appearing in a specific page, or for connections made in a specific page. Searches the first page where the script was loaded (or where the connection was made) and the latest occurrences list.
32
+
-**Script URL**: Filter scripts by their URL.
33
+
-**Connection URL**: Filter connections by their target URL. Depending on your [configuration](/page-shield/reference/settings/#connection-target-details), it may search only by target hostname.
34
+
-**Seen on host**: Look for scripts appearing on specific hostnames, or connections made in a specific hostname.
35
+
-**Seen on page** (requires a Business or Enterprise plan): Look for scripts appearing in a specific page, or for connections made in a specific page. Searches the first page where the script was loaded (or where the connection was made) and the latest occurrences list.
38
36
-**Status**: Filter scripts or connections by [status](/page-shield/reference/script-statuses/).
39
37
-**Type**: Filter cookies according to their type: first-party cookies or unknown.
40
38
- Cookie property: Filter by a cookie property such as **Name**, **Domain**, **Path**, **Same site**, **HTTP only**, and **Secure**.
@@ -47,12 +45,11 @@ The All Reported Connections and All Reported Scripts dashboards show all the de
47
45
48
46
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
49
47
2. Go to the client-side resources page:
50
-
51
48
- Old dashboard: Go to **Security** > **Page Shield**.
52
49
- New security dashboard: Go to **Security** > **Web assets** > **Client-side resources** tab.
53
50
54
51
3. Select **Scripts** or **Connections**.
55
-
4. Select **View all**.
52
+
4. Select **View all scripts** or **View all connections**.
56
53
5. Review the information displayed in the dashboard.
57
54
58
55
You can filter the data in these dashboards using different criteria, and print a report with the displayed records.
@@ -84,7 +81,6 @@ The script details also include the last 10 script versions detected by Page Shi
84
81
The details of each cookie include:
85
82
86
83
-**Type**: A cookie can have the following types:
87
-
88
84
-**First-party**: Cookies set by the origin server through a `set-cookie` HTTP response header.
89
85
-**Unknown**: All other detected cookies.
90
86
@@ -122,7 +118,6 @@ To export script, connection, or cookie information in CSV format:
122
118
123
119
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
124
120
2. Go to the client-side resources page:
125
-
126
121
- Old dashboard: Go to **Security** > **Page Shield**.
127
122
- New security dashboard: Go to **Security** > **Web assets** > **Client-side resources** tab.
Copy file name to clipboardExpand all lines: src/content/docs/page-shield/detection/review-malicious-scripts.mdx
+1-5Lines changed: 1 addition & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,14 +23,12 @@ To review the scripts considered malicious:
23
23
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
24
24
25
25
2. Go to the client-side resources page:
26
-
27
26
- Old dashboard: Go to **Security** > **Page Shield**.
28
27
- New security dashboard: Go to **Security** > **Web assets** > **Client-side resources** tab.
29
28
30
29
3. Select the **Scripts** tab.
31
30
32
31
4. Select **Details** for each script considered malicious. The script details will contain:
33
-
34
32
-**Malicious code analysis**: Scores between 1-99 classifying how malicious the current script version is, where 1 means definitely malicious and 99 means definitely not malicious.
35
33
-**Code behavior analysis**: Scores classifying the behavior of the current script version in terms of code obfuscation and data exfiltration. The scores vary between 1-99, where 1 means definitely malicious and 99 means definitely not malicious.
36
34
-**Threat intelligence**: Whether the script URL and/or domain is known to be malicious according to threat intelligence feeds. If the script is considered malicious according to the feeds, the dashboard will show a list of associated threat [categories](/page-shield/how-it-works/malicious-script-detection/#malicious-script-and-connection-categories). If threat intelligence feeds do not have any information about the script URL or domain, the dashboard will show **Not present**.
@@ -43,7 +41,7 @@ To review the scripts considered malicious:
43
41
44
42
5. Based on the displayed information, and with the help of the [last seen/first seen fields in the script details](/page-shield/detection/monitor-connections-scripts/#view-details), review and update the pages where the malicious script was detected.
45
43
46
-
You can configure alerts for detected malicious scripts. Refer to [Page Shield alerts](/page-shield/alerts/) for more information.
44
+
You can configure alerts for detected malicious scripts. Refer to [Alerts](/page-shield/alerts/) for more information.
47
45
48
46
## Review malicious connections
49
47
@@ -52,14 +50,12 @@ To review the connections considered malicious:
52
50
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
53
51
54
52
2. Go to the client-side resources page:
55
-
56
53
- Old dashboard: Go to **Security** > **Page Shield**.
57
54
- New security dashboard: Go to **Security** > **Web assets** > **Client-side resources** tab.
58
55
59
56
3. Select **Connections**.
60
57
61
58
4. Select **Details** for each connection considered malicious. The connection details will contain:
62
-
63
59
-**URL match**: Whether the connection's target URL is known to be malicious according to threat intelligence feeds. This field requires that you configure Page Shield to analyze the [full URI](/page-shield/reference/settings/#connection-target-details) of outgoing connections.
64
60
-**Domain match**: Whether the connection's target domain is known to be malicious according to threat intelligence feeds.
65
61
-**Category**: The categorization of the connection considered malicious according to threat intelligence feeds.
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
29
-
2. Go to **Security** > **Settings**> **Client-side abuse** tab.
29
+
2. Go to **Security** > **Settings**and filter by **Clientside abuse**.
30
30
3. Next to **Continuous script monitoring**, set the toggle to **On**.
31
31
32
32
If you do not have access to resource monitoring in the Cloudflare dashboard, check if your user has one of the [necessary roles](/page-shield/reference/roles-and-permissions/).
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/), and select your account and domain.
94
-
2. Go to **Security** > **Settings**> > **Client-side abuse** tab.
95
-
3. Next to **Continuous script monitoring**, select the toggle to **Off**.
94
+
2. Go to **Security** > **Settings**and filter by **Clientside abuse**.
95
+
3. Next to **Continuous script monitoring**, set the toggle to **Off**.
96
96
97
97
</TabItem> </Tabs>
98
98
99
99
:::note
100
100
101
-
Turning off Page Shield's client-side resource monitoring will not turn off [policies](/page-shield/policies/). To turn off policies:
101
+
Turning off Page Shield's client-side resource monitoring will not turn off [policies](/page-shield/policies/) (also known as content security rules). To turn off policies:
102
102
103
103
- Old dashboard: Go to **Security** > **Page Shield** > **Policies**.
104
104
- New security dashboard: Go to **Security** > **Security rules** and filter by `Content security rules`.
0 commit comments