cscli scenarios install crowdsecurity/teamspeak3-bfleakspeed of 10s, capacity of 2
1type: leaky2name: crowdsecurity/teamspeak3-bf3description: "detect teamspeak3 server bruteforce"4filter: evt.Meta.log_type == 'ts3_fail_auth'5groupby: evt.Meta.source_ip6capacity: 27leakspeed: "10s"8blackhole: 5m9labels:10 service: teamspeak311 type: bruteforce12 classification:13 - attack.T111014 behavior: "generic:bruteforce"15 spoofable: 016 confidence: 217 label: "TeamSpeak3 Bruteforce"18 remediation: true19