feat: add Proxmox Backup Server (PBS) support

[nicoh88]

Includes:

• Parser for PBS API auth logs (pbs_failed-auth / pbs_success-auth)
• Bruteforce scenario (triggers on 6 failed logins within 10s)
• Complete hubtests for parser and scenario
• Collection bundling the PBS setup and documentation

Thanks:
@fulljackz for Proxmox parsers and scenarios.

[sabban]

Hi,

Thank you for your contribution!

It seems the tests are not passing; something is off with the parsed IP:

(L.34)  🔴  => results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][0].Evt.Parsed["client_ip"] == "31.54.38.23"
        Actual expression values:
            results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][0].Evt.Parsed["client_ip"] = '::ffff:31.54.38.23'

(L.46)  🔴  => results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][0].Evt.Meta["source_ip"] == "31.54.38.23"
        Actual expression values:
            results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][0].Evt.Meta["source_ip"] = '::ffff:31.54.38.23'

(L.50)  🔴  => results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][1].Evt.Parsed["client_ip"] == "31.54.38.23"
        Actual expression values:
            results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][1].Evt.Parsed["client_ip"] = '::ffff:31.54.38.23'

(L.62)  🔴  => results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][1].Evt.Meta["source_ip"] == "31.54.38.23"
        Actual expression values:
            results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][1].Evt.Meta["source_ip"] = '::ffff:31.54.38.23'

(L.66)  🔴  => results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][2].Evt.Parsed["client_ip"] == "31.54.38.23"
        Actual expression values:
            results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][2].Evt.Parsed["client_ip"] = '::ffff:31.54.38.23'

(L.78)  🔴  => results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][2].Evt.Meta["source_ip"] == "31.54.38.23"
        Actual expression values:
            results["s01-parse"]["nicoh88/proxmox-backup-auth-logs"][2].Evt.Meta["source_ip"] = '::ffff:31.54.38.23'

(L.95)  🔴  => results["s02-enrich"]["crowdsecurity/dateparse-enrich"][0].Evt.Parsed["client_ip"] == "31.54.38.23"
        Actual expression values:
            results["s02-enrich"]["crowdsecurity/dateparse-enrich"][0].Evt.Parsed["client_ip"] = '::ffff:31.54.38.23'

(L.107)  🔴  => results["s02-enrich"]["crowdsecurity/dateparse-enrich"][0].Evt.Meta["source_ip"] == "31.54.38.23"
        Actual expression values:
            results["s02-enrich"]["crowdsecurity/dateparse-enrich"][0].Evt.Meta["source_ip"] = '::ffff:31.54.38.23'

(L.113)  🔴  => results["s02-enrich"]["crowdsecurity/dateparse-enrich"][1].Evt.Parsed["client_ip"] == "31.54.38.23"
        Actual expression values:
            results["s02-enrich"]["crowdsecurity/dateparse-enrich"][1].Evt.Parsed["client_ip"] = '::ffff:31.54.38.23'

(L.125)  🔴  => results["s02-enrich"]["crowdsecurity/dateparse-enrich"][1].Evt.Meta["source_ip"] == "31.54.38.23"
        Actual expression values:
            results["s02-enrich"]["crowdsecurity/dateparse-enrich"][1].Evt.Meta["source_ip"] = '::ffff:31.54.38.23'

(L.131)  🔴  => results["s02-enrich"]["crowdsecurity/dateparse-enrich"][2].Evt.Parsed["client_ip"] == "31.54.38.23"
        Actual expression values:
            results["s02-enrich"]["crowdsecurity/dateparse-enrich"][2].Evt.Parsed["client_ip"] = '::ffff:31.54.38.23'

(L.143)  🔴  => results["s02-enrich"]["crowdsecurity/dateparse-enrich"][2].Evt.Meta["source_ip"] == "31.54.38.23"
        Actual expression values:
            results["s02-enrich"]["crowdsecurity/dateparse-enrich"][2].Evt.Meta["source_ip"] = '::ffff:31.54.38.23'

Did I miss something?

Regards,

[nicoh88]

@sabban fixed. re-run.