Content
- Log parsers1
- Attack scenarios1
sudo cscli collections install firix/authentikThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Hover a line or a note to see what each field does.
name: firix/authentikparsers:- firix/authentik-logsscenarios:- firix/authentik-bfcollections:description: "Authentik Support : parser and brute-force detection"labels:label: "Authentik - Bruteforce Protection"author: firixtags:- security_engine- linux- brute-force- authentik
Sign in to see the Security Engines that run this collection, the version they run and whether it was modified locally.
A collection to defend Authentik instance against common attacks :
Example acquisition for this collection :
If using LOG_FILE environment variable:
1---2filenames:3 - /var/log/authentik.log4labels:5 type: authentik
Directly monitoring Docker
1---2source: docker3container_name:4 - authentik5labels:6 type: authentik