Update beta_program.mdx

More details about torterra beta

Author: rr404

crowdsec-docs/unversioned/beta_program.mdx

@@ -22,18 +22,37 @@ To join the CrowdSec Beta program, click the [Beta opt-in option directly in the
 
 ### CrowdSec Threat Forecast Blocklist - Beta starts 2024-10-25 
 
-#### What is it ?
+#### What is it and what to expect?
 
-The Threat Forecast Blocklist is a dynamic, adaptive blocklist customized to your organization's signals. By identifying attacks on similar profiles, it predicts threats that will likely target your organization in the coming days. 
+The **Threat Forecast Blocklist** is a dynamic, adaptive blocklist customized to your organization's signals.  
+By identifying attacks on similar profiles, it predicts threats that will likely target your organization in the coming days.  
+It will update every 24 hours, and the signals of all your Security Engines will be considered to build the prediction.  
 
-The Threat Forecast Blocklist will update every 24 hours, and the signals of all your Security Engines will be considered to build the prediction.
+It's tailored to your organization; hence, we expect that it should allow preemptive remediation, resulting in a **drop in the number of alerts**.   
+Optionally, if you have an iptables of nftables remediation component, you'll be able to see some [metrics about this blocklist's efficiency](https://docs.crowdsec.net/docs/next/observability/usage_metrics)
 
-#### Who will have access to it ?
+#### Who will have access to it?
 
-If you have at least one enrolled security engine with an average of more than 100 alerts a week (total on your organization) you have a chance to be invited.  
-You'll receive an email on Friday October the 25th 2024.
+If you have at least one enrolled security engine with an average of more than 100 alerts a week (total for your organization) you have a chance to be invited.  
+You'll receive an email on Friday, October the 25th, 2024.
 
-**Important note**: You will have 15 days to start using the Threat Forecast Blocklist and 30 days total starting today to test it out. If you do not use it within 15 days, your access will be reallocated to someone else.
+**Important note**: You will have 15 days to start using the Threat Forecast Blocklist and 30 days in total starting today to test it out. If you do not use it within 15 days, your access will be reallocated to someone else.
+
+#### How to subscribe to this blocklist
+
+- Log into your console account
+- Go to the blocklist catalog and search "forecast": https://app.crowdsec.net/blocklists?page=1&q=forecast
+  - If you're part of the this beta, you should see the **Threat Forecast Blocklist**
+  - Click on it
+- You should have landed in the details page for this blocklist
+- Click on subscribe
+- In the subscription popup
+  - Select the tab "Security Engines"
+  - Chose one or more engines to subscribe to this blocklist
+  - Select the desired remediation (we recommend **Ban**)
+- Click confirm subscription
+
+Note that you must have a [remediation component](https://doc.crowdsec.net/u/bouncers/intro) on those engines to effectively block the IPs.
 
 ## Your feedback is key