1name: crowdsecurity/appsec-generic-test
2description: "AppSec Generic Test: trigger on GET /crowdsec-test-NtktlJHV4TfBSK3wvlhiOBnl`"
3rules:
4  - and:
5      # 1) Match the HTTP verb
6      - zones:
7          - METHOD
8        match:
9          type: regex
10          value: (GET|HEAD)
11      # 2) Match exactly the test path
12      - zones:
13          - URI
14        match:
15          type: equals
16          value: /crowdsec-test-NtktlJHV4TfBSK3wvlhiOBnl
17labels:
18  service: http
19  type: test
20  confidence: 0
21  spoofable: 3
22  behavior: "http:test"
23  label: "AppSec Generic Test"
24  classification:
25    - attack.T1190
26