Re: Please help me to get Snort rules for Automotive

I know there is the subscriber ruleset, registered user ruleset and the
community ruleset. I believe that the subscriber ruleset has more recent
signatures than the community ones. When I said publicly available ruleset,
I meant the community rules which is relatively older than the subscriber
ruleset - which is to be expected since you pay for one and not for the
other.

If I am wrong please correct me, and I shall stand corrected.

Best -

On Thu, Nov 10, 2022 at 2:49 PM Joel Esler <[email protected]> wrote:

>
>
> On Nov 9, 2022, at 8:40 AM, Ayan Bandyopadhyay via Snort-sigs <
> [email protected]> wrote:
>
> ** If yes, then Snort can inspect and detect any attacks against
> those applications. Towards that you do not need any custom rules, the
> regular snort rules that are available will suffice. The publicly available
> rules will be a bit old. You will need to contact any 3rd party providers
> who sell snort rules to get the latest.
>
> [Ayan]:
> Please provide some good third party reference who are strong in rule
> development?
>
>
> What does this even mean?  “Regular Snort rules”.  You mean the ones from
> Talos that are updated twice a week?  They aren’t old at all.
>

_______________________________________________
Snort-sigs mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!