diff --git a/scenarios/crowdsecurity/http-dos-switching-ua.yaml b/scenarios/crowdsecurity/http-dos-switching-ua.yaml index 88769f917a1..474f25be3be 100644 --- a/scenarios/crowdsecurity/http-dos-switching-ua.yaml +++ b/scenarios/crowdsecurity/http-dos-switching-ua.yaml @@ -1,7 +1,7 @@ type: leaky format: 2.0 #debug: true -name: crowdsecurity/http-dos-swithcing-ua +name: crowdsecurity/http-dos-switching-ua description: "Detect DoS tools switching user-agent too fast" #pattern seen in mhddos tool filter: 'evt.Meta.log_type in ["http_access-log", "http_error-log"]' @@ -18,4 +18,4 @@ labels: classification: - attack.T1498 behavior: "http:dos" - label: "HTTP DOS with varying UA" \ No newline at end of file + label: "HTTP DOS with varying UA"