Content
- Log parsers1
- Attack scenarios1
Sonarr - Bruteforce Protection
Collection
- Version
- 0.2
- Name
- schiz0phr3ne/sonarr
Sonarr support: parser and brute-force detections
Installation
sudo cscli collections install schiz0phr3ne/sonarrThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
Hover a line or a note to see what each field does.
name: schiz0phr3ne/sonarrparsers:- schiz0phr3ne/sonarr-logsscenarios:- schiz0phr3ne/sonarr-bfdescription: "Sonarr support: parser and brute-force detections"labels:label: "Sonarr - Bruteforce Protection"author: schiz0phr3netags:- security_engine- linux- brute-force- sonarr
Installed on
Know where it runs
Sign in to see the Security Engines that run this collection, the version they run and whether it was modified locally.
Documentation
A collection to defend your Sonarr instance against common attacks:
- Sonarr parser
- Sonarr brute-force & enumeration detection
Acquisition template
Example acquisition for this collection:
1---2source: file3filenames:4 - /var/log/syslog5labels:6 type: syslog7---8source: file9filenames:10 - /var/log/sonarr.txt11labels:12 type: Sonarr
Depending on your installation method, you may need to change the acquisition template.