Installation

cscli collections install PintjesB/technitium

Source code

Technitium DNS Server Collection

Name: technitium
Author: PintjesB

This collection provides support for monitoring Technitium DNS server authentication failures and detecting brute force attacks.

Components

Parser: PintjesB/technitium-logs - Parses Technitium DNS server authentication failure logs
Scenario: PintjesB/technitium-bf - Detects brute force attacks against Technitium DNS server web interface

The Technitium integration requires the following log acquisition configuration:

1filenames:
2  - /syslog-server/technitium.log
3labels:
4  type: technitium

Content