8 lines
306 B
YAML
8 lines
306 B
YAML
name: crowdsecurity/immich-whitelists
|
|
description: "Whitelist false positive from Immich-api"
|
|
filter: "evt.Meta.http_path != ''"
|
|
whitelist:
|
|
reason: "Whitelist false positive from Immich-api"
|
|
expression:
|
|
- evt.Meta.http_verb == 'GET' && evt.Meta.http_path matches '/api/assets/[a-f0-9-]+/thumbnail'
|