Dhillon A. K. has written a new article about mod_security. The article is essentially a brief introduction to the module. More importantly, however, there is a piece of code attached to the article (in PHP) that parses the mod_security audit log and inputs the data it into a MySQL database. I didn't really have time to try it out myself, but seems pretty handy if you want to inspect the data afterwards!
About LevelBlue
LevelBlue secures what's next with intelligence-led security delivering visibility and speed to stop threats faster.
As the world’s largest and most analyst-recognized pure-play managed security services provider,
our AI-powered managed services and cyber expertise across managed, advisory, and incident response services help clients operate with confidence.
Learn more about us.
