Skip to content

Commit 3d1d8ff

Browse files
Copilotbuixor
andauthored
Clarify technology probing scenario description and trim whitespace
Agent-Logs-Url: https://github.com/crowdsecurity/hub/sessions/ac391c70-f3f2-41da-a496-78626375dc17 Co-authored-by: buixor <990714+buixor@users.noreply.github.com>
1 parent b65fd25 commit 3d1d8ff

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

scenarios/crowdsecurity/http-technology-probing.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
type: trigger
22
name: crowdsecurity/http-technology-probing
3-
description: "Detect generic HTTP probing"
3+
description: "Detect HTTP technology/vendor probing"
44
filter: |
5-
if (evt.Meta.service == 'http' and
6-
evt.Meta.log_type in ['http_access-log', 'http_error-log'] and
5+
if (evt.Meta.service == 'http' and
6+
evt.Meta.log_type in ['http_access-log', 'http_error-log'] and
77
evt.Meta.http_status in ['404', '403'])
88
{
99
let target_technology = LookupFile(evt.Meta.http_path, "technology_probing.json");

0 commit comments

Comments
 (0)