Re: Snort Subscriber Rules Update 2024-04-04

Probably a good question for snort-openappid’s list.

> On Apr 4, 2024, at 14:27, Jonathan Lee via Snort-sigs <[email protected]> wrote:
> 
> can this detect Docker containers like Kali Bleeding Edge Docker Container with appid?
> 
>> On Apr 4, 2024, at 05:57, Research via Snort-sigs <[email protected]> wrote:
>> 
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> 
>> 
>> Talos Snort Subscriber Rules Update
>> 
>> Synopsis:
>> This release adds and modifies rules in several categories.
>> 
>> Details:
>> Talos has added and modified multiple rules in the file-pdf and
>> server-webapp rule sets to provide coverage for emerging threats from
>> these technologies.
>> 
>> 
>> For a complete list of new and modified rules please see:
>> 
>> https://www.snort.org/advisories
>> -----BEGIN PGP SIGNATURE-----
>> 
>> iQIcBAEBAgAGBQJmDqPUAAoJEMzg39Iewam/qGcP/jE7jkzAWvXKgasMKUzHCb7P
>> xTTq3ypqB4DGuXPGqBjub8UCX6zZaRpP149uWtExUKT+LMUgMEwMBEo+ZFkKV3QE
>> 2iqRVxG9KYiqPxajDIhtrzbXfTO98/MP/pPebtCIZGFLB8vwWSY7hD3cyd/smUd0
>> 0EjVq/0p8FFzb6ste3hhU/FsCgjK5j7V8tDH7UuHWU/g04OFwXs4fRAxqHarmNBX
>> unmRXEXtRLGVtQQ5D6ZSj8O0r3OvAf7ZoRb2doPGKKmMmYBCJB3SG8llwEyqUK1i
>> 5t5b0ECBYpq0L8L2YypSb23mnEz2OJnISeYNcLNtraFE1zAt0LmsSlKiLPmwAbCQ
>> c5aTNhAo2iphiwdwcQIosCcXBIwrp7gaRC+43C3MF1RrRZE4zU7rsohF5CfDEFpZ
>> nmPsrvzm81Rv4oWRoHP1VcViQsHOe1Cc0U94x+uuS3WHrMUhHXjwP4tDd51h8T77
>> wGWcqY/cW3RCUIzTMlyYcWPEb125J6b9X3UR9POcm5ahhotyTLMTx27KZbZ0VsCY
>> hIkItvTsv1czeZerMEqst7i3J4aWH7ipvdzyNifyZhvZT9/33zcH49VGirklhEOI
>> mlTNyshkky8sAGjabsOK2AYwUEmvyBvwNmAEhxkSeemwkLVKRhH+oi8iHaLiHQrg
>> 8lcNRN7wjIc8TrDgSUzQ
>> =VaLp
>> -----END PGP SIGNATURE-----
>> 
>> _______________________________________________
>> Snort-sigs mailing list
>> [email protected]
>> https://lists.snort.org/mailman/listinfo/snort-sigs
>> 
>> Please visit http://blog.snort.org for the latest news about Snort!
>> 
>> Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
>> 
>> Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
> 
> _______________________________________________
> Snort-sigs mailing list
> [email protected]
> https://lists.snort.org/mailman/listinfo/snort-sigs
> 
> Please visit http://blog.snort.org for the latest news about Snort!
> 
> Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
> 
> Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!

_______________________________________________
Snort-sigs mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!