Hi, I am using Emergingthreats.net Community rules. I am not sure some of them are checked and some not For Example: I would like to add Suricata Ruleset from abuse.ch SSLBL | Blacklist Download SSLBL's SSL certificate, JA3 fingerprint and IP blacklist …

Seeing that you want SSLBL, URLhaus, and Feodo, I will make all the instructions for them. More details on this can be found here The problem with the URLhaus is that we need require IPs for the sets, and there is no list with it. So what is the URLhaus used for? Malware. In that case I would sug…

SSL Blacklist, Feodotracker

Security Intrusion Prevention

trish (trish) 18 October 2020 22:31 2

I think I found an answer to the “unchecked” issue with ET ruleset