December 2017
Intermediate to advanced
364 pages
7h 30m
English
When the ElastAlert detects an SSH brute force attack, it will trigger a request to lambda endpoint by providing the attacker's IP address. Then our automated defense platform will trigger a network ACL blocklist rule. This can be configurable to say for how much time it should be blocked.
