| Interface | Description |
|---|---|
| Customs.CustomsOptions |
Runtime options for
Customs pipeline. |
| Class | Description |
|---|---|
| ContentServerVarianceDetector |
Provides transforms to detect if an ip is making a variety of requests to the content server or
is just abusing auth server APIs.
|
| ContentServerVarianceDetector.PresenceBased |
Provides a basic transform for detecting variance based on whether an ip exists
|
| Customs |
Implements various analysis heuristics on
FxaAuth streams |
| Customs.CustomsSummary |
Summarizes various events processed by Customs pipeline
|
| CustomsAccountCreation |
Abusive account creation from a single source address
|
| CustomsAccountCreationDist |
Abusive distributed account creation
|
| CustomsAccountEnumeration |
Detection of an ip attempting to enumerate FxA users through the account status endpoint.
|
| CustomsActivityForMonitoredAccounts |
Customs activity monitor for specified accounts
|
| CustomsAlert |
Alert format used for notifications to FxA
|
| CustomsFeatures |
CustomsFeatures describes the output of windowed feature extraction
|
| CustomsFeaturesCombiner |
Combines windowed key/value collections into a collection of
CustomsFeatures |
| CustomsFeaturesCombiner.CustomsFeaturesCombineFn |
Combine.CombineFn for creating collections of CustomsFeatures |
| CustomsLoginFailureForAtRiskAccount |
Flag failed logins to potentially at risk accounts.
|
| CustomsNotification |
Convert
Alert objects generated by pipeline to CustomsAlert and submit them over
Pubsub. |
| CustomsPasswordResetAbuse |
Abuse of FxA password reset endpoints from a single source address
|
| CustomsPreFilter |
Basic filtering of ingested events prior to analysis application
|
| CustomsStatusComparator |
Customs status check comparator
|
| CustomsUtil |
Utility functions for working with
FxaAuth events in customs |
| CustomsVelocity |
Customs location velocity analysis
|
| CustomsWindow |
Helper class for windowing functions in the Customs pipeline.
|
| CustomsWindow.FixedTenMinutes |
Transform to create a fixed ten minute window with early firings.
|
| PrivateRelayForward |
Private relay forwarding analysis
|
| PrivateRelayForward.PrivateRelayForwardState |
PrivateRelayForwardState describes the format of individual state entries
|
| SourceLoginFailure |
Simple detection of excessive login failures per-source across fixed window
|
| SourceLoginFailureDist |
Detect login failures for a single account occuring from multiple source addresses in a fixed
window of time.
|
| Enum | Description |
|---|---|
| CustomsAlert.AlertAction |
Alert actions
|
| CustomsAlert.AlertSeverity |
Severity of a given alert
|
| CustomsAlert.IndicatorType |
Indicator types
|
Copyright © 2022. All rights reserved.