readonly/scriptbox
1
0
Fork 0
mirror of https://github.com/minoplhy/scriptbox.git synced 2024-12-05 01:46:57 +00:00
Code Issues Projects Releases Wiki Activity

crowdsec-notifications : init

Browse Source
This commit is contained in:
minoplhy 2024-03-22 20:11:46 +07:00
parent 2cfad5cddf
commit 0ba128b5f7
Signed by: minoplhy
GPG Key ID: 41D406044E2434BF
5 changed files with 70 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
crowdsec-notifications/README.md Normal file
View File

@ -0,0 +1,7 @@
# Crowdsec Notifications
Crowdsec Notification for Discord and Line
**Remember to replace placeholder line with your authentication keys!**
![Discord Example](img/Discord_94N3DVisn8.png)
![Line Example](img/LINE_Q5uZ32zoph.png)

38
crowdsec-notifications/discord.yaml Normal file
View File

@ -0,0 +1,38 @@
type: http
name: discord
log_level: info
format: |
{
"content": null,
"embeds": [
{{range . -}}
{{$alert := . -}}
{{range .Decisions -}}
{{if $alert.Source.Cn -}}
{
"title": "{{.Scenario}}",
"description": ":flag_{{ $alert.Source.Cn | lower }}: {{$alert.Source.IP}}\n Hostname: {{Hostname}}\nAction: {{.Type}} {{.Duration}}\nLinks: [CTI](https://app.crowdsec.net/cti/{{$alert.Source.IP}}) | [Shodan](https://www.shodan.io/host/{{$alert.Source.IP}})",
"color": "16711680"
}
{{end}}
{{if not $alert.Source.Cn -}}
{
"title": "{{.Scenario}}",
"description": ":pirate_flag: {{$alert.Source.IP}}\nHostname: {{Hostname}}\nAction: {{.Type}} {{.Duration}}\nLinks: [CTI](https://app.crowdsec.net/cti/{{$alert.Source.IP}}) | [Shodan](https://www.shodan.io/host/{{$alert.Source.IP}})",
"color": "16711680"
}
{{end}}
{{end -}}
{{end -}}
]
}
url: https://discord.com/api/webhooks/[]/[]
method: POST
headers:
Content-Type: application/json

BIN
crowdsec-notifications/img/Discord_94N3DVisn8.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 24 KiB

BIN
crowdsec-notifications/img/LINE_Q5uZ32zoph.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 15 KiB

25
crowdsec-notifications/line.yaml Normal file
View File

@ -0,0 +1,25 @@
type: http
name: line
log_level: info
format: |
message=
{{range . -}}{{$alert := . -}}{{range .Decisions -}}
[ *{{.Scenario}}* ]
{{if $alert.Source.Cn -}}{{ $alert.Source.Cn }}{{end}}{{if not $alert.Source.Cn -}}N/A{{end}} {{$alert.Source.IP}}
Hostname: {{Hostname}}
Action: {{.Type}} {{.Duration}}
Links: https://app.crowdsec.net/cti/{{$alert.Source.IP}}
Links: https://www.shodan.io/host/{{$alert.Source.IP}}
{{end -}}
{{end -}}
url: https://notify-api.line.me/api/notify
method: POST
headers:
Content-Type: application/x-www-form-urlencoded
Authorization: Bearer <access_token>