[Snort-openappid] OppenAppID and Shared Object Rules

Sec_Aficionado secaficionado at ...8...
Sat Nov 1 17:35:08 EDT 2014


In the snort blog entry titled "Firing up  OpenAppID", the author recommends  disabling the SO rules. There wasn't a specific rule at the time "so it's easier to skip this for now", he said.

Is that still the case?

Are there any special considerations?

Thanks in advance.


More information about the Snort-openappid mailing list