> For the complete documentation index, see [llms.txt](https://docs.elastiflow.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.elastiflow.com/data_platforms/elastic/ml/netsec/netsec_bruteforce.md).

# Brute Force Attacks

Identifying brute force access attempts is crucial in maintaining network security and integrity. Brute force attacks, where attackers try numerous combinations of usernames and passwords to gain unauthorized access, are a common and persistent threat. These attacks can lead to unauthorized access to sensitive data, system compromise, and can be a precursor to more severe security breaches. Early detection and response to brute force attempts are vital for preventing attackers from gaining access and for safeguarding network resources and data.

ElastiFlow provides a collection of anomaly detection jobs designed to identify brute force access attempts plays a critical role in this early detection process. These jobs employ sophisticated algorithms to monitor and analyze authentication logs and traffic patterns, looking for signs that are indicative of brute force methods.

#### Downloads

| Schema    | Link                                                                                                                                                                |
| --------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **CODEX** | [All Brute Force ML Jobs for CODEX Schema](https://github.com/elastiflow/elastiflow_for_elasticsearch/raw/master/ml/codex/netsec_bruteforce/netsec_bruteforce.json) |
| **ECS**   | [All Brute Force ML Jobs for ECS Schema](https://github.com/elastiflow/elastiflow_for_elasticsearch/raw/master/ml/ecs/netsec_bruteforce/netsec_bruteforce.json)     |

By deploying this suite of anomaly detection jobs, organizations can quickly identify and respond to brute force access attempts. These tools provide an essential layer of defense, alerting administrators to suspicious activities so that immediate action can be taken, such as enforcing account lockouts, changing passwords, or implementing additional authentication measures. This proactive approach is key to maintaining robust security protocols and protecting against one of the most common and enduring forms of cyberattacks.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.elastiflow.com/data_platforms/elastic/ml/netsec/netsec_bruteforce.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.