KB: 1047

---

**How to set mitigation for OS command Injection? **

Problem Statement

The user wants to set the mitigation for the OS command injection attack.

Solution

Steps to Solve:-

1. Login into Haltdos console.

2. Go to Apps > WAF > listener > profile > profile settings > signatures

3. Select all signature and update status as "Prod" status.

4. Now, go to Apps > WAF > listener > profile > profile settings.

5. Set the operational settings to mitigation.

In this way, user can set the mitigation for the OS command injection attack and mitigate the attack.