mirror of
https://github.com/lucaspalomodevelop/core.git
synced 2026-03-20 03:16:12 +00:00
(ids) add source urls for suricata content providers
This commit is contained in:
parent
0a28a1b76c
commit
32dca498c8
@ -1,5 +1,5 @@
|
||||
<?xml version="1.0"?>
|
||||
<ruleset>
|
||||
<ruleset documentation_url="http://doc.emergingthreats.net/bin/view/Main/EmergingFAQ">
|
||||
<location url="https://rules.emergingthreats.net/open/suricata/rules/" prefix="ET open"/>
|
||||
<files>
|
||||
<file description="botcc.portgrouped">botcc.portgrouped.rules</file>
|
||||
|
||||
@ -2,9 +2,21 @@
|
||||
<ruleset>
|
||||
<location url="https://sslbl.abuse.ch/blacklist/" prefix="abuse.ch"/>
|
||||
<files>
|
||||
<file url="https://sslbl.abuse.ch/blacklist/sslblacklist.rules" description="SSL Fingerprint Blacklist">abuse.ch.sslblacklist.rules</file>
|
||||
<file url="https://sslbl.abuse.ch/blacklist/sslipblacklist.rules" description="SSL IP Blacklist">abuse.ch.sslipblacklist.rules</file>
|
||||
<file url="https://sslbl.abuse.ch/blacklist/dyre_sslipblacklist.rules" description="Dyre SSL IPBL">abuse.ch.dyre_sslipblacklist.rules</file>
|
||||
<file url="https://feodotracker.abuse.ch/blocklist/?download=suricata" description="Feodo Tracker">abuse.ch.feodotracker.rules</file>
|
||||
<file url="https://sslbl.abuse.ch/blacklist/sslblacklist.rules"
|
||||
description="SSL Fingerprint Blacklist"
|
||||
documentation_url="https://sslbl.abuse.ch/blacklist/"
|
||||
>abuse.ch.sslblacklist.rules</file>
|
||||
<file url="https://sslbl.abuse.ch/blacklist/sslipblacklist.rules"
|
||||
description="SSL IP Blacklist"
|
||||
documentation_url="https://sslbl.abuse.ch/blacklist/"
|
||||
>abuse.ch.sslipblacklist.rules</file>
|
||||
<file url="https://sslbl.abuse.ch/blacklist/dyre_sslipblacklist.rules"
|
||||
description="Dyre SSL IPBL"
|
||||
documentation_url="https://sslbl.abuse.ch/blacklist/"
|
||||
>abuse.ch.dyre_sslipblacklist.rules</file>
|
||||
<file url="https://feodotracker.abuse.ch/blocklist/?download=suricata"
|
||||
description="Feodo Tracker"
|
||||
documentation_url="https://feodotracker.abuse.ch/blocklist/"
|
||||
>abuse.ch.feodotracker.rules</file>
|
||||
</files>
|
||||
</ruleset>
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user