Re: Please help me to get Snort rules for Automotive

Joel Esler via Snort-sigs <[email protected]>
Newsgroups gmane.comp.security.ids.snort.sigs
Message-ID <[email protected]>
 https://www.snort.org/faq/what-are-the-differences-in-the-rule-sets

Check this out.

> On Nov 10, 2022, at 2:54 PM, Snort User <[email protected]> wrote:
> 
> I know there is the subscriber ruleset, registered user ruleset and the community ruleset. I believe that the subscriber ruleset has more recent signatures than the community ones. When I said publicly available ruleset, I meant the community rules which is relatively older than the subscriber ruleset - which is to be expected since you pay for one and not for the other.
> 
> If I am wrong please correct me, and I shall stand corrected.
> 
> Best -
> 
> On Thu, Nov 10, 2022 at 2:49 PM Joel Esler <[email protected] <mailto:[email protected]>> wrote:
>> 
>> 
>>> On Nov 9, 2022, at 8:40 AM, Ayan Bandyopadhyay via Snort-sigs <[email protected] <mailto:[email protected]>> wrote:
>>> 
>>> ** If yes, then Snort can inspect and detect any attacks against those applications. Towards that you do not need any custom rules, the regular snort rules that are available will suffice. The publicly available rules will be a bit old. You will need to contact any 3rd party providers who sell snort rules to get the latest.
>>>  
>>> [Ayan]:
>>> Please provide some good third party reference who are strong in rule development?
>> 
>> What does this even mean?  “Regular Snort rules”.  You mean the ones from Talos that are updated twice a week?  They aren’t old at all.

_______________________________________________
Snort-sigs mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.