crowdsecurity/hub

Issues

• Unifi OS 3 aren't being parsed

  #940 opened a year ago by GNU-Plus-Windows-User
  18

• [Baikal] Support fastcgi format too

  #1121 opened 3 months ago by LaurenceJJones
  0

• [auditd-sus-exec] False positives for wrapped executables on NixOS

  #1116 opened 4 months ago by poperigby
  0

• `crowdsecurity/thinkphp-cve-2018-20062` is very slow as it doesn't use RegexpInFile (and I'm not even sure it deserves to be a regexp)

  #910 opened 4 months ago by buixor
  1

• Vaultwarden parser doesn't handle time zones

  #988 opened 10 months ago by dlprows
  2

• [smtp] Extended postfix

  #1100 opened 4 months ago by LaurenceJJones
  1

• [caddy] Handle reverse proxy errors

  #1106 opened 4 months ago by LaurenceJJones
  0

• False positive: Nextcloud auto uploading and synchronizing from mobile clients (nextcloud behind nginx proxy)

  #1102 opened 4 months ago by brknkfr
  0

• Extend Odoo collection

  #1053 opened 4 months ago by sreisich
  6

• [sec-list] `MQQBrowser` is recognized as Bad UA

  #1101 opened 4 months ago by System233
  0

• False Positive: Nextcloud while using Nextcloud Memories App (crowdsecurity/http-crawl-non_statics)

  #1097 opened 4 months ago by florianwgnr
  1

• False Positive Nextcloud behind Nginx proxy and LePresidente/http-generic-403-bf

  #1092 opened 5 months ago by reinerj
  2

• False positive http-crawl-non_statics with Nextcloud Deck mobile app

  #991 opened 5 months ago by Libsystem-coop
  9

• babbar !?

  #1039 opened 5 months ago by daikoz
  2

• Nextcloud-Whitelist: missing expressions for Nextcloud Bookmarks

  #1089 opened 5 months ago by florianwgnr
  0

• Nextcloud-Whitelist: false-positive when opening the trashbin

  #1086 opened 5 months ago by florianwgnr
  0

• No range found for ip

  #1077 opened 5 months ago by Simbiat
  14

• Incorrect grok pattern for Asterisk

  #1073 opened 6 months ago by crazybolillo
  2

• explain nginx log error

  #1072 opened 6 months ago by vyouzhis
  2

• sshd parser false positive regarding AllowUsers

  #1064 opened 6 months ago by onxzy
  1

• failed to compile node 'crowdsecurity/geoip-enrich'

  #1062 opened 6 months ago by c-premus
  4

• Update modsecurity.yaml to expect 'client:' OR 'remote:' in APACHEERRORPREFIX2:

  #1038 opened 7 months ago by Staene
  7

• [endlessh] Add endlessh-go compatbility to parser

  #1035 opened 7 months ago by Swiiney
  1

• Jellyfin parser not working

  #1046 opened 7 months ago by woolmonkey
  2

• [hub-linter] Prevent WAN IPs in tests

  #1027 opened 8 months ago by LaurenceJJones
  0

• http-probing - Nextcloud false positive

  #1023 opened 9 months ago by TristisOris
  2

• [nextcloud-whitelist] Not fully working with HAProxy because of http_verb

  #1019 opened 9 months ago by djuhnix
  1

• ssh-bf are not detected when AllowUsers are defined

  #1018 opened 9 months ago by pfostenberg
  1

• [http-logs] Should check for HTTP verb?

  #1016 opened 9 months ago by LaurenceJJones
  0

• Caddy Log Parser : client ip is not parsed

  #995 opened 10 months ago by SimonVanacco
  1

• New version of OWASP CRS breaks the Modsecurity parser

  #996 opened 10 months ago by ne20002
  2

• [UnmarshalJSON] check if line startsWith `{`

  #986 opened 10 months ago by LaurenceJJones
  1

• Whitelist Good Actors - WP Rocket

  #992 opened 10 months ago by LtSich
  1

• Personal Git repo support?

  #989 opened 10 months ago by dlprows
  2

• crowdsecurity/nginx-proxy-manager-logs parser failure

  #987 opened 10 months ago by ventra007
  2

• Add http_referer to the http_base.yaml context

  #984 opened 10 months ago by mendozal
  3

• How to use the collections of schiz0phr3ne (radarr,sonarr,prowlarr)?

  #911 opened a year ago by saschabrockel
  3

• Incorrect regular expression in crowdsecurity/exim-logs

  #978 opened a year ago by MATPOCKuH
  2

• CI: validate .index.json

  #966 opened a year ago by blotus
  0

• [ModSecurity] Parser wont parse

  #962 opened a year ago by LaurenceJJones
  0

• [update] PF logs include port

  #926 opened a year ago by LaurenceJJones
  1

• Authelia parser is still using jsonextract it should be changed UnmarshalJSON

  #960 opened a year ago by LePresidente
  0

• Grafana logs are not parsed correctly when using LePresidente/grafana

  #958 opened a year ago by LePresidente
  1

• [blackhole] Groupby should be set on every blackhole sceanario

  #947 opened a year ago by LaurenceJJones
  0

• Mysql logs are not parsed on my Server - Solution

  #944 opened a year ago by Wycofane
  1

• Nextcloud - false positives when browsing Addressbook web app

  #932 opened a year ago by hubertbanas
  0

• Parser Failure: "Line 0/2 is missing evt.StrTime"

  #928 opened a year ago by m0urs
  6

• LaPresidente jellyseerr collection is not parsing logs

  #929 opened a year ago by cellulosa
  2

• TCP packets not parsed in a1ad /mikrotik-log ROS 7.11

  #915 opened a year ago by vallyls
  0

• missing log4j pattern bypass

  #883 opened a year ago by yanbreu
  0