Suppose you are the sysadmin, and you know of an impending attack that just started or about to start soon. You can either wait it out, or try a few tricks and quick mitigation to fend off attackers and try to reduce the attack vector or damage that could be done.
This is definitely not the right way to securing an environment, but when you have attackers at the gate, it's not the time to argue with staff, but to focus on just fending off all the goblins down the gates, with whatever technical or psychological trick you can come up with.
What kind of mitigation steps can I do in such case?
Can I quickly Install and configure ModSecurity quickly to protect (to an extent) the web apps?
- What Hardening IIS/Apache quick configurations can I apply?
- Any web filtering libraries (like antiXSS) that I can install quickly?