Re: Please help me to get Snort rules for Automotive
Snort User via Snort-sigs <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.sigs |
|---|---|
| Message-ID | <CAJ578684J7nG8V_Szp2=L7mZ7UJQv2UZQqP5uDq1DRZL0mafog@mail.gmail.com> |
Yes, this is exactly what I was referring to. There is a significant delay of 30 days. In any case, by old I did not mean months or years. But yes, I could have been more specific than be vague by saying old. *This ruleset is 30 days behind the Snort Subscriber Rule Set and does not contains zero-day threats under the “limited” provision of the Snort Subscriber Rule Set License <https://snort.org/vrt_license>. * On Thu, Nov 10, 2022 at 3:04 PM Joel Esler <[email protected]> wrote: > https://www.snort.org/faq/what-are-the-differences-in-the-rule-sets > > Check this out. > > On Nov 10, 2022, at 2:54 PM, Snort User <[email protected]> wrote: > > I know there is the subscriber ruleset, registered user ruleset and the > community ruleset. I believe that the subscriber ruleset has more recent > signatures than the community ones. When I said publicly available ruleset, > I meant the community rules which is relatively older than the subscriber > ruleset - which is to be expected since you pay for one and not for the > other. > > If I am wrong please correct me, and I shall stand corrected. > > Best - > > On Thu, Nov 10, 2022 at 2:49 PM Joel Esler <[email protected]> wrote: > >> >> >> On Nov 9, 2022, at 8:40 AM, Ayan Bandyopadhyay via Snort-sigs < >> [email protected]> wrote: >> >> ** If yes, then Snort can inspect and detect any attacks against >> those applications. Towards that you do not need any custom rules, the >> regular snort rules that are available will suffice. The publicly available >> rules will be a bit old. You will need to contact any 3rd party providers >> who sell snort rules to get the latest. >> >> [Ayan]: >> Please provide some good third party reference who are strong in rule >> development? >> >> >> What does this even mean? “Regular Snort rules”. You mean the ones from >> Talos that are updated twice a week? They aren’t old at all. >> > > _______________________________________________ Snort-sigs mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-sigs Please visit http://blog.snort.org for the latest news about Snort! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!