[Snort-sigs] Trying to learn to read Snort rules

lists at ...3397... lists at ...3397...
Tue Jul 28 10:04:17 EDT 2015


On 07/28/15 08:58, Justin Merhoff wrote:
> To whom it may concern,
> 
> I am in a SANS.org 501 class and I am trying to better understand Snort rules.
> Can any one direct me to where I can fine some rules I can read to test my
> skills at reading the rules? I would really appreciate the help.

Snort:

https://www.snort.org/downloads/community/community-rules.tar.gz
https://www.snort.org/downloads/#rule-downloads <-- You need to register

Emerging-Threats:

https://rules.emergingthreats.net/open/snort-2.9.0/

All the best,
Nathan Fowler




More information about the Snort-sigs mailing list