Pregunta de entrevista de Shopee

How would you write a SIEM detection rule for sql injection