mirror of
https://github.com/aykhans/my-self-host-services.git
synced 2026-05-29 15:35:59 +00:00
crowdsec: update profiles/profiles.yaml
This commit is contained in:
@@ -1,7 +1,7 @@
|
|||||||
name: default_ip_remediation
|
name: default_ip_remediation
|
||||||
filters:
|
filters:
|
||||||
- Alert.Remediation == true && Alert.GetScope() == "Ip"
|
- Alert.Remediation == true && Alert.GetScope() == "Ip"
|
||||||
duration_expr: Sprintf('%dh', min(168, (GetDecisionsCount(Alert.GetValue())+1)*4))
|
duration_expr: Sprintf('%dh', min(730, (GetDecisionsCount(Alert.GetValue())+1)*4))
|
||||||
decisions:
|
decisions:
|
||||||
- type: ban
|
- type: ban
|
||||||
duration: 4h
|
duration: 4h
|
||||||
@@ -11,7 +11,7 @@ on_success: break
|
|||||||
name: default_range_remediation
|
name: default_range_remediation
|
||||||
filters:
|
filters:
|
||||||
- Alert.Remediation == true && Alert.GetScope() == "Range"
|
- Alert.Remediation == true && Alert.GetScope() == "Range"
|
||||||
duration_expr: Sprintf('%dh', min(168, (GetDecisionsCount(Alert.GetValue())+1)*4))
|
duration_expr: Sprintf('%dh', min(730, (GetDecisionsCount(Alert.GetValue())+1)*4))
|
||||||
decisions:
|
decisions:
|
||||||
- type: ban
|
- type: ban
|
||||||
duration: 4h
|
duration: 4h
|
||||||
|
|||||||
Reference in New Issue
Block a user