HTTP/2 rapid-reset flood (CVE-2023-44487) on this connection
net.h2_rapid_reset · convicts
networklayer
automationcategory
1evaders caught
What it catches
CVE-2023-44487; HEADERS+RST_STREAM flood — never a human, an unambiguous layer-7 DoS
Signals it reads
network.h2_rapid_reset
How it fires
present
Evaders it caught 1
Bypassed by 10
Frontier evaders that reach the detector uncaught (scored only suspicious, defeating every convicting tell) — this check is not one that stops them. The red-team frontier this detection still has to convict.