Project

General

Profile

Actions
Copy link

Feature #2758

closed

intel / reputation matching on arbitrary data

Added by Victor Julien about 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
5.0rc1
Effort:
Difficulty:
Label:

Description

Implement a way for the engine to match on arbitrary data for checking it against intel / reputation. Rule lang would drive this. I see this as a mix between #2318 and more advanced transformation support.

Related issues 1 (1 open — 0 closed)

Related to Suricata - Task #2685: SuriCon 2018 brainstormAssignedVictor JulienActions
Actions
Copy link

Also available in: Atom PDF