New Attack Rule

One regex pattern per line. Matched case-insensitively against request paths.