update taxo

crowdsecurity · Feb 13, 2025 · db07c46 · db07c46
1 parent 195e980
commit db07c46
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/scenarios/crowdsecurity/crowdsec-appsec-outofband.yaml b/scenarios/crowdsecurity/crowdsec-appsec-outofband.yaml
@@ -7,9 +7,15 @@ leakspeed: 30s
 capacity: 5
 labels:
   type: exploit
+  behavior: "http:exploit"
   remediation: true
   confidence: 1
   spoofable: 0
+  classification:
+    - attack.T1190
+  label: "Triggered multiple OutOfBand CrowdSec AppSec rules"
+  service: http
+
 groupby: "evt.Meta.source_ip"
 #---
 # at least requests blocked on 3 distinct URIs