cscli scenarios install crowdsecurity/synology-dsm-bfleakspeed of 10s, capacity of 5
1# Synology DSM auth.log bruteforce2type: leaky3name: crowdsecurity/synology-dsm-bf4description: "Detect Synology DSM web auth bruteforce"5filter: "evt.Meta.log_type == 'synology-dsm_failed_auth'"6leakspeed: "10s"7capacity: 58groupby: evt.Meta.source_ip9blackhole: 1m10reprocess: true11labels:12 service: synology_dsm13 remediation: true14 confidence: 315 spoofable: 016 classification:17 - attack.T111018 behavior: "http:bruteforce"19 label: "Synology DSM Bruteforce"