enhance: Update scenario to have 0 confidence as it more of a configu…

…ration violation than anything we can add some weight to it

scenarios/crowdsecurity/ssh-refused-conn.yaml

@@ -4,13 +4,13 @@ description: "Detect sshd refused connections"
 filter: "evt.Meta.log_type == 'ssh_refused_conn'"
 groupby: evt.Meta.source_ip
 blackhole: 1m
-reprocess: true
+reprocess: false
 labels:
   service: ssh
-  confidence: 3
+  confidence: 0
   spoofable: 0
   classification:
-    - attack.T1110
-  label: "SSH Bruteforce"
-  behavior: "ssh:bruteforce"
+    - attack.T1595
+  label: "SSH Refused Connection"
+  behavior: "generic:scan"
   remediation: true