I'm on the hunt for some websites that can help me create custom rules for Suricata. Does anyone have any recommendations?
2 Answers
Once you've got a set of rules for the most common scenarios, it usually just comes down to copying, pasting, and tweaking them. But the real headache comes when you have to manage hundreds of different rules.
Which specific activities are you trying to track? If it's mainly about learning from existing examples, you should check out the site at rules.emergingthreats.net/blockrules/. Just a heads up, though, the managed AWS rules cover a lot of ground for various situations.
Related Questions
XML Signature Verifier
Voltage Divider Calculator
SSL Certificate Decoder
SQL Formatter
Online Font Playground to Test Google or Custom Fonts
File Hash Generator Online – Get Instant MD5 and SHA-256 Hashes