cscli scenarios install LearningSpot/baserow-bfDetect failed baserow authentications:
leakspeed of 1m, capacity of 5, blackhole of 5m on source ip
1type: leaky2name: LearningSpot/baserow-bf3description: "Detect failed login for Baserow"4filter: "evt.Meta.log_type == 'baserow_failed_login' && evt.Meta.status == '401'"5groupby: evt.Meta.source_ip6leakspeed: 1m7capacity: 58blackhole: 5m9labels:10 service: baserow11 classification:12 - attack.T111013 behavior: "http:bruteforce"14 label: "Baserow Bruteforce"15 confidence: 316 spoofable: 017 remediation: true18