Custom scenario labels (Behavior/MITRE/CVE) not appearing in CrowdSec Console

crowdsec
1

Hello,

Is it possible to pass Behavior, MITRE technique, and CVE metrics to the CrowdSec Console for custom scenarios?

For my custom scenarios, I have defined the following labels:

labels:
  remediation: true
  classification:
    - attack.T1595
  behavior: "http:scan"
  label: "WordPress Vuln Hunting"
  spoofable: 0
  service: wordpress
  confidence: 3

I have already applied the settings, but I still see the following in the Console:

  • Behavior: No behavior associated with this scenario

  • MITRE technique: No MITRE technique associated with this scenario.

  • CVE: No CVE associated with this scenario.

Thanks in advance!

2

Answered on reddit Reddit - The heart of the internet