Detection Is Not Protection: What Azure WAF Detection Mode Actually Does (and Doesn't)
blog.ebbypeter.com
Most teams think a WAF in Detection mode is partially protecting them. It isn’t. Here’s what actually happens to requests, why the logs actively mislead, and how organisations end up stuck in Detection mode indefinitely without noticing.