WEB_IIS ISAPI .ida access

 

Code: p1119

Severity: Warning

 

Description: This event is generated when an attempt is made to access the .ida Indexing Service ISAPI filter.

Impact: Intelligence gathering activity. If an .ida file is erroneously shared from a network share, an error message is returned from a request that contains the share path will be disclosed.

Corrective: Do not place files with the .ida suffix on a network share.