8cca4346a5
Add a new datasource that: - Receives HTTP requests from remediation components - Apply rules on them to determine whether they are malicious or not - Rules can be evaluated in-band (the remediation component will block the request directly) or out-band (the RC will let the request through, but crowdsec can still process the rule matches with scenarios) The PR also adds support for 2 new hub items: - appsec-configs: Configure the Application Security Engine (which rules to load, in which phase) - appsec-rules: a rule that is added in the Application Security Engine (can use either our own format, or seclang) --------- Co-authored-by: alteredCoder <kevin@crowdsec.net> Co-authored-by: Sebastien Blot <sebastien@crowdsec.net> Co-authored-by: mmetc <92726601+mmetc@users.noreply.github.com> Co-authored-by: Marco Mariani <marco@crowdsec.net> |
||
---|---|---|
.. | ||
tests | ||
crowdsec_cti.go | ||
crowdsec_cti_test.go | ||
debugger.go | ||
debugger_test.go | ||
expr_lib.go | ||
exprlib_test.go | ||
helpers.go | ||
jsonextract.go | ||
jsonextract_test.go | ||
strings.go | ||
xml.go | ||
xml_test.go |