Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 70bf539546 |
@@ -26,7 +26,7 @@
|
|||||||
- Access to fw
|
- Access to fw
|
||||||
- Check the ban list with `sudo cscli alerts list`
|
- Check the ban list with `sudo cscli alerts list`
|
||||||
- Read the ban case with `sudo cscli alerts inspect $NUMBER`
|
- Read the ban case with `sudo cscli alerts inspect $NUMBER`
|
||||||
- Add regex on whitelist
|
- Add expressions on whitelist
|
||||||
- evt.Meta.target_fqdn == '{{ services['actualbudget']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/data/migrations/'
|
- evt.Meta.target_fqdn == '{{ services['actualbudget']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/data/migrations/'
|
||||||
- Delete false positive decision
|
- Delete false positive decision
|
||||||
- Check false positive decision with `sudo cscli decision list`
|
- Check false positive decision with `sudo cscli decision list`
|
||||||
|
|||||||
@@ -25,8 +25,8 @@
|
|||||||
- Access to fw
|
- Access to fw
|
||||||
- Check the ban list with `sudo cscli alerts list`
|
- Check the ban list with `sudo cscli alerts list`
|
||||||
- Read the ban case with `sudo cscli alerts inspect $NUMBER`
|
- Read the ban case with `sudo cscli alerts inspect $NUMBER`
|
||||||
- Add regex on whitelist
|
- Add expressions on whitelist
|
||||||
- evt.Meta.target_fqdn == 'Immich.ilnmors.com' && evt.Meta.http_path contains '/api/assets/' && evt.Meta.http_path contains '/thumbnail'
|
- evt.Meta.target_fqdn == '{{ services['immich']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/api/assets/' && evt.Meta.http_path contains '/thumbnail'
|
||||||
- Delete false positive decision
|
- Delete false positive decision
|
||||||
- Check false positive decision with `sudo cscli decision list`
|
- Check false positive decision with `sudo cscli decision list`
|
||||||
- Delete false positive decision with `sudo cscli decision delete --id $ID`
|
- Delete false positive decision with `sudo cscli decision delete --id $ID`
|
||||||
|
|||||||
@@ -25,7 +25,7 @@
|
|||||||
- Access to fw
|
- Access to fw
|
||||||
- Check the ban list with `sudo cscli alerts list`
|
- Check the ban list with `sudo cscli alerts list`
|
||||||
- Read the ban case with `sudo cscli alerts inspect $NUMBER`
|
- Read the ban case with `sudo cscli alerts inspect $NUMBER`
|
||||||
- Add regex on whitelist
|
- Add expressions on whitelist
|
||||||
- evt.Meta.target_fqdn == '{{ services['opencloud']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/js/chunks/'
|
- evt.Meta.target_fqdn == '{{ services['opencloud']['domain']['public'] }}.{{ domain['public'] }}' && evt.Meta.http_path contains '/js/chunks/'
|
||||||
- Delete false positive decision
|
- Delete false positive decision
|
||||||
- Check false positive decision with `sudo cscli decision list`
|
- Check false positive decision with `sudo cscli decision list`
|
||||||
|
|||||||
Reference in New Issue
Block a user