Review suricata scenarios confidence and spoofable (#1207)

* Review suricata scenarios confidence and spoofable * Update taxonomy --------- Co-authored-by: GitHub Action <[email protected]>
crowdsecurity · Dec 30, 2024 · 1f716ff · 1f716ff
1 parent c095c32
commit 1f716ff
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/scenarios/crowdsecurity/suricata-alerts.yaml b/scenarios/crowdsecurity/suricata-alerts.yaml
@@ -9,8 +9,8 @@ reprocess: true
 labels:
   service: suricata
   remediation: true
-  confidence: 2
-  spoofable: 0
+  confidence: 1
+  spoofable: 3
   classification:
     - attack.T1190
     - attack.T1595
@@ -32,8 +32,8 @@ blackhole: 1m
 reprocess: true
 labels:
   service: suricata
-  confidence: 2
-  spoofable: 0
+  confidence: 1
+  spoofable: 3
   classification:
     - attack.T1190
     - attack.T1595

diff --git a/taxonomy/scenarios.json b/taxonomy/scenarios.json
@@ -4790,8 +4790,8 @@
       "TA0001:T1190",
       "TA0043:T1595"
     ],
-    "confidence": 2,
-    "spoofable": 0,
+    "confidence": 1,
+    "spoofable": 3,
     "cti": true,
     "service": "suricata"
   },
@@ -4806,8 +4806,8 @@
       "TA0001:T1190",
       "TA0043:T1595"
     ],
-    "confidence": 2,
-    "spoofable": 0,
+    "confidence": 1,
+    "spoofable": 3,
     "cti": true,
     "service": "suricata"
   },