[Oisf-users] Announcing Suricata-Update

Jason Ish ish at unx.ca
Tue Dec 5 19:58:42 UTC 2017


We are excited to announce the first alpha release of our new tool for 
updating Suricata rules. This is a new rule update tool specifically 
built for Suricata with a goal of being useful out of the box, even with 
no configuration.

This release also introduces the Suricata Intel Index, which is 
currently a list of available rule sources which Suricata-Update is 
aware of. The idea here is to make it easier for users to find available 
rule sets, as well as allowing rule writers to make their rules more 
discoverable.

Features include:

  * Default to Emerging Threats Open ruleset if no configuration
    provided.
  * Automatic discovery of Suricata version for use in ruleset URLs.
  * Flowbit resolution
  * Enable, disable, drop and modify filters that should be familiar to
    users of Pulled Pork and Oinkmaster.
  * Easy enabling of additional rule sets from the index.

We invite all interested users to checkout the Quick Start 
documentation, and leave us feedback on the Suricata-Update issue tracker.

If you are a rule writer and would like to get listed in the index, 
please leave a ticket in the issue tracker.

Quick Start Documentation
   http://suricata-update.readthedocs.io/en/1.0.0a1/quickstart.html

Github Project Page
   https://github.com/OISF/suricata-update

Issue Tracker
   https://redmine.openinfosecfoundation.org/projects/suricata-update

--
Jason Ish


More information about the Oisf-users mailing list