dbb420f79e
Co-authored-by: AlteredCoder Co-authored-by: erenJag
9 lines
166 B
YAML
9 lines
166 B
YAML
name: default_ip_remediation
|
|
#debug: true
|
|
filters:
|
|
- Alert.Remediation == true && Alert.GetScope() == "Ip"
|
|
decisions:
|
|
- type: ban
|
|
duration: 1h
|
|
on_success: break
|