1type: trigger
2format: 3.0
3name: crowdsecurity/appsec-generic-test
4description: "Crowdsec Generic Test Scenario for AppSec: generate an alert for appsec out of band rule for testing"
5filter: "evt.Meta.log_type == 'appsec-info' && evt.Meta.rule_name == 'crowdsecurity/appsec-generic-test'"
6groupby: evt.Meta.source_ip
7blackhole: 1m
8labels:
9  confidence: 0
10  spoofable: 3
11  behavior: "http:test"
12  label: "Crowdsec Generic Test Scenario for AppSec"
13  service: http
14  remediation: false
15