{"admin":{"candidate_rule":"Custom rule","candidate_rule_group":"Custom URI path rule","description":"Administrative URL probe","endpoint":"/test/admin"},"rce":{"candidate_rule":"Log4JRCE / ExploitablePaths (signature dependent)","candidate_rule_group":"AWSManagedRulesKnownBadInputsRuleSet","description":"Command injection signature","endpoint":"/test/rce"},"rfi":{"candidate_rule":"GenericRFI_QUERYARGUMENTS","candidate_rule_group":"AWSManagedRulesCommonRuleSet","description":"Remote file inclusion","endpoint":"/test/rfi"},"scanner":{"candidate_rule":"UserAgent_BadBots_HEADER","candidate_rule_group":"AWSManagedRulesCommonRuleSet","description":"Scanner user-agent","endpoint":"/test/scanner"},"sqli":{"candidate_rule":"SQLi_QUERYARGUMENTS","candidate_rule_group":"AWSManagedRulesSQLiRuleSet","description":"SQL injection","endpoint":"/test/sqli"},"traversal":{"candidate_rule":"GenericLFI_QUERYARGUMENTS","candidate_rule_group":"AWSManagedRulesCommonRuleSet","description":"Path traversal / local file inclusion","endpoint":"/test/traversal"},"xss":{"candidate_rule":"CrossSiteScripting_QUERYARGUMENTS","candidate_rule_group":"AWSManagedRulesCommonRuleSet","description":"Cross-site scripting","endpoint":"/test/xss"}}