diff --git a/crowdsec-docs/sidebarsUnversioned.js b/crowdsec-docs/sidebarsUnversioned.js index 7cda202f4..bb34e1ab6 100644 --- a/crowdsec-docs/sidebarsUnversioned.js +++ b/crowdsec-docs/sidebarsUnversioned.js @@ -351,6 +351,11 @@ module.exports = { id: "blocklists/getting_started", label: "Getting Started", }, + { + type: "doc", + label: "Featured", + id: "console/blocklists/featured", + }, { type: "doc", label: "Catalog", diff --git a/crowdsec-docs/static/img/console/alerts/am-i-under-attack-global-alerts-view.png b/crowdsec-docs/static/img/console/alerts/am-i-under-attack-global-alerts-view.png index 7ceb10f61..447e15e8b 100644 Binary files a/crowdsec-docs/static/img/console/alerts/am-i-under-attack-global-alerts-view.png and b/crowdsec-docs/static/img/console/alerts/am-i-under-attack-global-alerts-view.png differ diff --git a/crowdsec-docs/static/img/console/alerts/am-i-under-attack-switch.png b/crowdsec-docs/static/img/console/alerts/am-i-under-attack-switch.png index 4cea66302..5e36fb279 100644 Binary files a/crowdsec-docs/static/img/console/alerts/am-i-under-attack-switch.png and b/crowdsec-docs/static/img/console/alerts/am-i-under-attack-switch.png differ diff --git a/crowdsec-docs/static/img/console/blocklists/blocklist-quotas.png b/crowdsec-docs/static/img/console/blocklists/blocklist-quotas.png new file mode 100644 index 000000000..da7a8f66b Binary files /dev/null and b/crowdsec-docs/static/img/console/blocklists/blocklist-quotas.png differ diff --git a/crowdsec-docs/static/img/console/blocklists/blocklist-search-filters.png b/crowdsec-docs/static/img/console/blocklists/blocklist-search-filters.png new file mode 100644 index 000000000..cbea47719 Binary files /dev/null and b/crowdsec-docs/static/img/console/blocklists/blocklist-search-filters.png differ diff --git a/crowdsec-docs/static/img/console/blocklists/blocklist-search-main.png b/crowdsec-docs/static/img/console/blocklists/blocklist-search-main.png new file mode 100644 index 000000000..4456763de Binary files /dev/null and b/crowdsec-docs/static/img/console/blocklists/blocklist-search-main.png differ diff --git a/crowdsec-docs/static/img/console/blocklists/catalog.png b/crowdsec-docs/static/img/console/blocklists/catalog.png index 4596fb7c0..ae7237cf3 100644 Binary files a/crowdsec-docs/static/img/console/blocklists/catalog.png and b/crowdsec-docs/static/img/console/blocklists/catalog.png differ diff --git a/crowdsec-docs/static/img/console/blocklists/categories.png b/crowdsec-docs/static/img/console/blocklists/categories.png new file mode 100644 index 000000000..64695010b Binary files /dev/null and b/crowdsec-docs/static/img/console/blocklists/categories.png differ diff --git a/crowdsec-docs/static/img/console/blocklists/tailored.png b/crowdsec-docs/static/img/console/blocklists/tailored.png new file mode 100644 index 000000000..5038b72fb Binary files /dev/null and b/crowdsec-docs/static/img/console/blocklists/tailored.png differ diff --git a/crowdsec-docs/unversioned/console/blocklists/catalog.md b/crowdsec-docs/unversioned/console/blocklists/catalog.md index 570d7a6d3..d9108a3cd 100644 --- a/crowdsec-docs/unversioned/console/blocklists/catalog.md +++ b/crowdsec-docs/unversioned/console/blocklists/catalog.md @@ -1,17 +1,35 @@ # Blocklists catalog To provide blocklists tailored to each need, CrowdSec has a wide catalog of blocklists, encompassing a variety of threat types and sources. This diversity allows to select and implement blocklists that best match their specific security requirements. +The search page in the CrowdSec Console provides a centralized interface to explore, subscribe, and manage blocklists tailored to enhance your organization’s security posture. This page allows to browse all available blocklists, find the ones most relevant to your needs, and activate them to protect your infrastructure. + ![](/img/console/blocklists/catalog.png) -The catalog is split into two distinct sections: +The page is divided into several key sections, each serving a distinct purpose to simplify the process of managing blocklists: + +**Top Section: Available Subscription Types Overview** +This section displays the number of subscriptions remaining for the organization under each tier. + +![](/img/console/blocklists/blocklist-quotas.png) + + +**Left Panel: Blocklist Search and Filters** +The left-hand panel is dedicated to the search engine, which allows you to efficiently browse and filter blocklists based on specific criteria. +Using these filters helps you quickly locate blocklists that match your organization’s specific requirements. +
+Alt text for the image +
+ + -* **The list of blocklists already installed on your infrastructure.** +**Main Section: Blocklist Results** +The central area displays the blocklist results based on your search and filters. Each blocklist card provides key details. -To review the infrastructure status at a glance, In the lower part of each item are listed the Security Engines subscribed to this blocklist, and the type of remediation applied to the IPs. +You can also toggle between Expanded Mode and Condensed Mode. -![](/img/console/blocklists/catalog_item_point_se_tag.png) +![](/img/console/blocklists/blocklist-search-main.png) -* **All the blocklists provided by CrowdSec** -Once a blocklist of interest has been spotted, clicking on the subscribe button will lead to the details page of this blocklist. +**Accessing Active Subscriptions** +To view and manage your active blocklist subscriptions, navigate to the Subscriptions menu in the Blocklists tab. This section provides an overview of all currently subscribed blocklists, allowing you to track and update your subscriptions as needed. \ No newline at end of file diff --git a/crowdsec-docs/unversioned/console/blocklists/featured.md b/crowdsec-docs/unversioned/console/blocklists/featured.md new file mode 100644 index 000000000..eef0f148d --- /dev/null +++ b/crowdsec-docs/unversioned/console/blocklists/featured.md @@ -0,0 +1,34 @@ +# Featured Blocklists + +Featured Blocklists page advertises the best of what CrowdSec has to provide security wise to your organization. + +### Tailored Blocklist selection + +![](/img/console/blocklists/tailored.png) + +CrowdSec's new Blocklist Suggestions feature leverages advanced AI technology to enhance your organization's cybersecurity measures. By analyzing signals shared by enrolled Security Engines, this feature identifies and recommends the most effective Blocklists to protect against specific types of attacks targeting your infrastructure. + +**Pre-requisites** +For an organization to benefit from the Blocklist Suggestions feature, the following pre-requisites must be met: + +* Security Engine must be enrolled in the CrowdSec ecosystem. +* Security Engine must actively share signals with the CrowdSec network. + +**Feature Activation** +The feature is automatically enabled for all CrowdSec users who meet the pre-requisites. No manual configuration is required to start receiving suggestions. + +**Data Privacy and Usage** +All data is processed internally by CrowdSec, with no third-party access. Only CrowdSec-owned systems handle the signals, ensuring that your data remains secure and private. + +**Performance Metrics** +To help gauge the impact of these suggestions, an indicator in the Console shows the potential reduction in alerts you can expect after installing the recommended Blocklists. This allows you to see at a glance how much benefit each suggested Blocklist might provide. + +**Update Frequency** +The AI analysis runs on a daily basis. Any newly suggested Blocklists appear automatically in the Console, reflecting the most recent attack patterns observed in your organization. + +### Blocklist categorization + +![](/img/console/blocklists/categories.png) + +Under the Blocklist suggestions, another section regroups many CrowdSec Blocklists, grouped into main categories addressing different security needs. +These Blocklists are categorized to make it quick for users to navigate and identify the most relevant ones based on their infrastructure, industry, or attack patterns. By selecting the appropriate Blocklists, users can enhance their security defenses and proactively mitigate threats. \ No newline at end of file