cscli scenarios install Jgigantino31/ntfy-bfDetect failed ntfy authentications:
1# ntfy BF scan2name: Jgigantino31/ntfy-bf3description: "Detect ntfy bruteforce"4filter: "evt.Meta.log_type == 'ntfy_failed_auth'"5#debug: true6type: leaky7groupby: evt.Meta.source_ip8leakspeed: 20s9capacity: 510blackhole: 1m11labels:12 service: ntfy13 behavior: "http:bruteforce"14 spoofable: 015 confidence: 316 classification:17 - attack.T111018 label: "Ntfy Bruteforce"19 remediation: true20