While reviewing a suspicious HTTP request captured in Wireshark, an analyst sees the following request headers: GET /admin/config.php HTTP/1.1 Host: 192.168.10.55 User-Agent: sqlmap/1.6.12#stable (https://sqlmap.org) Accept: */* Connection: close Which artifact element in these headers most directly identifies the nature of the activity as an automated attack?