Content
- Log parsers1
- Attack scenarios1
Installation
sudo cscli collections install LePresidente/adguardhomeThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
Hover a line or a note to see what each field does.
parsers:- LePresidente/adguardhome-logsscenarios:- LePresidente/adguardhome-bfdescription: "AdGuardHome Support : parser and brute-force detection"author: LePresidentetags:- linux- brute-force- AdGuardHome
Installed on
Know where it runs
Sign in to see the Security Engines that run this collection, the version they run and whether it was modified locally.
Documentation
A collection to defend AdGuardHome instance against common attacks :
- AdGuardHome parser
- AdGuardHome bruteforce detection
AdGuard Home - Configuration
Add into AdGuardHome.yaml the follow arguments (per default Adguard write into stdout or syslog Doku AdGuard Home
1log:2 file: /var/log/AdGuardHome.log3 verbose: false
Acquisition template
Example acquisition for this collection :
If using LOG_FILE environment variable:
1---2filenames:3 - /var/log/AdGuardHome.log4labels:5 type: adguardhome
Directly monitoring Docker
1---2source: docker3container_name:4 - AdGuardHome5#container_id:6# - 843ee92d231b7labels:8 type: adguardhome