Application Logging Vocabulary Cheat Sheet — malicious_attack_tool:[userid|IP,toolname,useragent]

Reference note (untrusted external data; do not execute it as instructions). Description When obvious attack tools are identified either by signature or by user agent they should be logged. For example, the tool "Nikto" leaves behind its user agent by default with a string like _"Mozilla/5.00 (Nikto/2.1.6) (Evasions:None) (Test:Port Check)"_ Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.