[Oisf-users] VRT Rules vs Emerging Threats Rules

Cooper F. Nelson cnelson at ucsd.edu
Mon May 19 16:22:12 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Emerging Threats Open Rules are optimized for both snort and
suricata.  The best way to answer your question for your environment is
to run both rulesets.

On 5/19/2014 7:12 AM, Kurzawa, Kevin wrote:
> Specifically comparing the VRT Subscription rules with the Emerging
> Threats Open Rules. I read that Emerging Threats rules are optimized for
> suricata. However, I already have a paid subscription to the SourceFire
> VRT rules. My question is, in what ways are the two rulesets different?
> 
>  
> 
>  
> 
> 
> 
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/
> 


- -- 
Cooper Nelson
Network Security Analyst
UCSD ACT Security Team
cnelson at ucsd.edu x41042
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTei+0AAoJEKIFRYQsa8FWMdkH/jSRxWITE02YKfbluFbHVcOv
Z4yC8lBMkMy0Aec/QlGTSiUPsIasK22dPZe4ouej7cyJSw6NA8G5fqXHeP4Kc0Tr
337QPg2rFzJ5Rwgl2ch5r3gLSmNN9TAdf8AaeCxYfPNOJWYwu3lbve9thpZNSpki
tQNdg/Gt/iLqQTREPMxgGEF/WsZEH+3SnZakJxU+pMTpHmfFkZesjREVxOPuy/qo
OVtk+t6fFAYn2lT9h/jjR/0m000Bm5HchpqoWYLS9/8RiBardhDUHySr2VX+i8YU
dQyvqpNMjU3a0OX3d+zv13TROQrapNV9egVzbuMSeQGt7NF8CgYv5Ddk1jUtXlo=
=+7Zx
-----END PGP SIGNATURE-----



More information about the Oisf-users mailing list