(ids) add source urls for suricata content providers

This commit is contained in:
Ad Schellevis 2016-02-10 17:38:48 +01:00
parent 0a28a1b76c
commit 32dca498c8
2 changed files with 17 additions and 5 deletions

View File

@ -1,5 +1,5 @@
<?xml version="1.0"?>
<ruleset>
<ruleset documentation_url="http://doc.emergingthreats.net/bin/view/Main/EmergingFAQ">
<location url="https://rules.emergingthreats.net/open/suricata/rules/" prefix="ET open"/>
<files>
<file description="botcc.portgrouped">botcc.portgrouped.rules</file>

View File

@ -2,9 +2,21 @@
<ruleset>
<location url="https://sslbl.abuse.ch/blacklist/" prefix="abuse.ch"/>
<files>
<file url="https://sslbl.abuse.ch/blacklist/sslblacklist.rules" description="SSL Fingerprint Blacklist">abuse.ch.sslblacklist.rules</file>
<file url="https://sslbl.abuse.ch/blacklist/sslipblacklist.rules" description="SSL IP Blacklist">abuse.ch.sslipblacklist.rules</file>
<file url="https://sslbl.abuse.ch/blacklist/dyre_sslipblacklist.rules" description="Dyre SSL IPBL">abuse.ch.dyre_sslipblacklist.rules</file>
<file url="https://feodotracker.abuse.ch/blocklist/?download=suricata" description="Feodo Tracker">abuse.ch.feodotracker.rules</file>
<file url="https://sslbl.abuse.ch/blacklist/sslblacklist.rules"
description="SSL Fingerprint Blacklist"
documentation_url="https://sslbl.abuse.ch/blacklist/"
>abuse.ch.sslblacklist.rules</file>
<file url="https://sslbl.abuse.ch/blacklist/sslipblacklist.rules"
description="SSL IP Blacklist"
documentation_url="https://sslbl.abuse.ch/blacklist/"
>abuse.ch.sslipblacklist.rules</file>
<file url="https://sslbl.abuse.ch/blacklist/dyre_sslipblacklist.rules"
description="Dyre SSL IPBL"
documentation_url="https://sslbl.abuse.ch/blacklist/"
>abuse.ch.dyre_sslipblacklist.rules</file>
<file url="https://feodotracker.abuse.ch/blocklist/?download=suricata"
description="Feodo Tracker"
documentation_url="https://feodotracker.abuse.ch/blocklist/"
>abuse.ch.feodotracker.rules</file>
</files>
</ruleset>