File: //usr/syno/share/loganalyzer/plugin/brute_force_attack.json
{
"name": "loganalyzer:brute_force_attack_analyzer",
"events": [{
"app_id": "auth",
"event_ids": [
"0x0011",
"0x0012",
"0x0015"
]
}],
"lib": "brute_force_attack.so",
"alerts": [{
"category": "userInfo",
"severity": "medium",
"label": "BruteForceAttack",
"default_group": "all",
"str_section": "loganalyzer",
"str_id": "brute_force_attack",
"config": {
"path": "/usr/syno/etc/loganalyzer/brute_force_attack/brute_force_attack.conf",
"default": {
"thresh_minutes": 5,
"thresh_fails": 10
}
}
}]
}