Update taxonomy

Author: actions-user

taxonomy/scenarios.json

@@ -7054,6 +7054,39 @@
     "service": "ssh",
     "created_at": "2021-09-27T15:17:49"
   },
+  "crowdsecurity/ssh-time-based-bf": {
+    "name": "crowdsecurity/ssh-time-based-bf",
+    "description": "Detect time-based ssh bruteforce attempts that evade rate limiting (with false positive reduction)",
+    "label": "SSH Time-Based Bruteforce",
+    "behaviors": [
+      "ssh:bruteforce"
+    ],
+    "mitre_attacks": [
+      "TA0006:T1110"
+    ],
+    "confidence": 3,
+    "spoofable": 0,
+    "cti": true,
+    "service": "ssh",
+    "created_at": "2026-01-20T09:34:42"
+  },
+  "crowdsecurity/ssh-time-based-bf_user-enum": {
+    "name": "crowdsecurity/ssh-time-based-bf_user-enum",
+    "description": "Detect time-based ssh user enum bruteforce attempts (with false positive reduction)",
+    "label": "SSH Time-Based User Enumeration",
+    "behaviors": [
+      "ssh:bruteforce"
+    ],
+    "mitre_attacks": [
+      "TA0043:T1589",
+      "TA0006:T1110"
+    ],
+    "confidence": 3,
+    "spoofable": 0,
+    "cti": true,
+    "service": "ssh",
+    "created_at": "2026-01-20T09:34:42"
+  },
   "crowdsecurity/stirling-pdf-bf": {
     "name": "crowdsecurity/stirling-pdf-bf",
     "description": "Detect stirling pdf bruteforce",