CrowdSec

Configurations

Avatar of crowdsecurity
Log parser

Whitelist events from actual budget

Avatar of LePresidente
Attack scenarioadguardhomeNot spoofableHigh confidence

Detect adguardhome bruteforce attacks

Avatar of LePresidente
Log parser

Parse adguardhome logs

Avatar of crowdsecurity
Attack scenarioamavisNot spoofableHigh confidence

Ban ips that are blocked by amavis

Avatar of crowdsecurity
Log parser

Parse amavis logs

Avatar of corvese
Log parser

Parses apache guacamole logs

Avatar of corvese
Attack scenarioApache Guacamoleapache-guacamoleNot spoofableHigh confidence

Detect apache guacamole user bruteforce

Avatar of corvese
Attack scenarioApache Guacamoleapache-guacamoleNot spoofableHigh confidence

Detect apache guacamole user enum bruteforce

Avatar of crowdsecurity
Log parser

Parse apache2 access and error logs

Avatar of crowdsecurity

Log4j CVE-2021-44228

v0.7 by @crowdsecurity / apache_log4j2_cve-2021-44228

Attack scenarioApacheapacheNot spoofableHigh confidence

Detect cve-2021-44228 exploitation attempts

Avatar of jusabatier
Log parser

Parse apereo cas audits logs

Avatar of jusabatier
Attack scenariohttpNot spoofableHigh confidence

Detect cas bruteforce

Avatar of jusabatier
Attack scenariohttpNot spoofableHigh confidence

Detect slow cas bruteforce

Avatar of crowdsecurity

Blocked by CrowdSec AppSec

v0.2 by @crowdsecurity / appsec-bot-challenge-too-many-requests

Attack scenariohttpNot spoofableNo confidence

Client made too many request to challenge page

Avatar of crowdsecurity

Blocked by CrowdSec AppSec

v0.2 by @crowdsecurity / appsec-bot-challenge-too-many-submissions

Attack scenariohttpNot spoofableNo confidence

Client made too many submissions for challenge

Avatar of crowdsecurity
Log parser

Parse appsec bot-detection / challenge events

Avatar of crowdsecurity
Attack scenariohttpHighly spoofableNo confidence

Crowdsec generic test scenario for appsec: generate an alert for appsec out of band rule for testing

Avatar of crowdsecurity
Log parser

Parse appsec events

Avatar of crowdsecurity
Attack scenariohttpNot spoofableLow confidence

Identify attacks flagged by crowdsec appsec via native rules

Avatar of crowdsecurity
Attack scenariohttpNot spoofableHigh confidence

Identify attacks flagged by crowdsec appsec

1/49