cscli scenarios install baudneo/gotify-bfBruteforce protection for Gotify server.
Leak speed of 10 seconds with a capacity of 4.
1type: leaky2name: baudneo/gotify-bf3description: "Detect bruteforce"4filter: "evt.Meta.log_type == 'gotify_failed_auth'"5groupby: "evt.Meta.source_ip"6capacity: 37leakspeed: "10s"8blackhole: 1m9labels:10 service: gotify11 behavior: "http:bruteforce"12 classification:13 - attack.T111014 spoofable: 015 confidence: 316 label: "Gotify Bruteforce"17 remediation: true18