Add Security_Containers/crowdsec/postoverflows/s01-whitelist/geoip-allow.yaml

2026-05-15 02:50:14 +00:00
parent 8cadad94db
commit a8080c86a4
1 changed files with 7 additions and 0 deletions
@@ -0,0 +1,7 @@
+name: crowdsecurity/geoip-allow-us-de
+description: "Block all countries except US and Germany"
+filter: "evt.Enriched.IsoCode != 'US' && evt.Enriched.IsoCode != 'DE'"
+blackhole: 1m
+labels:
+  type: geo_block
+remediation: true