The bruteforce detector puts input and output targets to the NOTE output field. Would it make sense to add some target fields instead? Possibly a dynamic one from which the reporter could extract all IP addresses? It would help to improve the quality of the reported incidents.
BTW what is the meaning of input/output targets? What is the difference?
The bruteforce detector puts input and output targets to the NOTE output field. Would it make sense to add some target fields instead? Possibly a dynamic one from which the reporter could extract all IP addresses? It would help to improve the quality of the reported incidents.
BTW what is the meaning of input/output targets? What is the difference?