[Oisf-users] rules for suricata

Mustafa Qasim alajal at gmail.com
Tue Nov 13 10:12:23 UTC 2018


The new rule management tool suricata-update comes with the following
available sources enlisting the commercial options.


*Name: oisf/trafficid*
  Vendor: OISF
  Summary: Suricata Traffic ID ruleset
  License: MIT
*Name: et/open*
  Vendor: Proofpoint
  Summary: Emerging Threats Open Ruleset
  License: MIT
*Name: scwx/security*
  Vendor: Secureworks
  Summary: Secureworks suricata-security ruleset.
  License: Commercial
  Parameters: secret-code
  Subscription: https://www.secureworks.com/contact/ (Please reference CTU
Countermeasures)
*Name: scwx/malware*
  Vendor: Secureworks
  Summary: Secureworks suricata-malware ruleset.
  License: Commercial
  Parameters: secret-code
  Subscription: https://www.secureworks.com/contact/ (Please reference CTU
Countermeasures)
*Name: et/pro*
  Vendor: Proofpoint
  Summary: Emerging Threats Pro Ruleset
  License: Commercial
  Replaces: et/open
  Parameters: secret-code
  Subscription: https://www.proofpoint.com/us/threat-insight/et-pro-ruleset
*Name: ptresearch/attackdetection*
  Vendor: Positive Technologies
  Summary: Positive Technologies Attack Detection Team ruleset
  License: Custom
*Name: sslbl/ssl-fp-blacklist*
  Vendor: Abuse.ch
  Summary: Abuse.ch SSL Blacklist
  License: Non-Commercial
*Name: etnetera/aggressive*
  Vendor: Etnetera a.s.
  Summary: Etnetera aggressive IP blacklist
  License: MIT


------
*Mustafa Qasim*
PGP: C57E0A7C
<http://pgp.mit.edu/pks/lookup?op=get&search=0x0A9C8A5EC57E0A7C>


On Tue, Sep 11, 2018 at 1:56 PM 박경호 <pgh5247 at naver.com> wrote:

> Hi all,
>
>
>
> If you know commercial rules for suricata, please let me know contact
> information or company name.
>
> I know, proofpoint sells ET ruleset for suricata.
>
>
>
> thanks in advance
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20181113/5c0be7db/attachment-0001.html>


More information about the Oisf-users mailing list