04 — Detection Coverage: Monitoring Path Traversal

Monitor for patterns:

• .. in file parameters
• Absolute paths when relative expected
• Unusual file access patterns
• Symlink dereference attempts

Detection via WAF/IDS and file access logs.

Next: 05 Defense Playbook