A collection to defend Zoraxy against common attacks :

• Zoraxy parser
• base http scenarios (crawl, 404 scan, bf)

Example acquisition for this collection (/etc/crowdsec/acquis.d/zoraxy.yaml) :

Local install...

---
filenames:
  - "/opt/zoraxy/log/zr_*.log" ## Wildcard all logs. Logs rollover each month.
labels:
  type: "zoraxy" ## Type defined in the parser

Docker install...

source: docker
container_name:
  - zoraxy
labels:
  type: zoraxy