Add Security_Containers/crowdsec/postoverflows/s01-whitelist/geoip-allow.yaml

2026-05-15 02:50:14 +00:00
parent 8cadad94db
commit a8080c86a4
1 changed files with 7 additions and 0 deletions
@@ -0,0 +1,7 @@
 name: crowdsecurity/geoip-allow-us-de
 description: "Block all countries except US and Germany"
 filter: "evt.Enriched.IsoCode != 'US' && evt.Enriched.IsoCode != 'DE'"
 blackhole: 1m
 labels:
  type: geo_block
 remediation: true