
Monitor Panther alerts & remediate SSH brute force attacks
This Story receives a Panther alert and checks if it is an SSH brute force attack, enriching it via Panther and AbuseIPDB. Then, it blocks it in AWS ACLs, creates a Jira ticket, and sends a Slack message to a channel.
Tools
Created by
How it works
Import this story to your tenant, from where you can adapt it to meet your unique needs.
ImportWas this story helpful?
Loading story...