type: trigger
name: kupidonia/cap-spisok
description: "Send users requesting /spisok/ to CAPTCHA"
filter: "evt.Meta.log_type == 'http_access-log' && evt.Meta.http_path contains '/spisok/'"
labels:
  service: http
  type: custom
  remediation: true
