saving uncommitted changes in /etc prior to dnf run

2023-10-23 15:56:04 +03:00
parent 04237a62d6
commit 7817b40ae2
84 changed files with 6999 additions and 3629 deletions
--- a/crowdsec/hub/scenarios/crowdsecurity/http-open-proxy.yaml
+++ b/crowdsec/hub/scenarios/crowdsecurity/http-open-proxy.yaml
@@ -5,6 +5,12 @@ description: "Detect scan for open proxy"
 filter: "evt.Meta.log_type == 'http_access-log' && evt.Meta.http_status in ['400','405'] && (evt.Parsed.verb == 'CONNECT' || evt.Parsed.request matches '^http[s]?://')"
 blackhole: 2m
 labels:
- service: http
- type: scan
- remediation: true
+  service: http
+  type: scan
+  remediation: true
+  classification:
+    - attack.T1595
+  behavior: "http:scan"
+  label: "HTTP Open Proxy Probing"
+  spoofable: 0
+  confidence: 3