cscli postoverflows install crowdsecurity/ipv6_to_range
This postoverflow check if the remediation concern an IPv6 and if yes, will change the value of the decision to the IPv6 /64 range.
1onsuccess: next_stage2filter: "evt.Overflow.Alert.Remediation == true && IsIPV6(evt.Overflow.Alert.Source.IP)"3name: crowdsecurity/ipv6_to_range4description: ""5statics:6 - target: evt.Overflow.Alert.Source.Value7 expression: IpToRange(evt.Overflow.Alert.Source.IP, "/64")8 - target: evt.Overflow.Alert.Source.Scope9 value: Range