Project

General

Profile

Actions
Copy link

Documentation #4706

open
JF CT

Guide for rulewriting

Documentation #4706: Guide for rulewriting

Added by Juliana Fajardini Reichow almost 5 years ago. Updated 20 days ago.

Status:
Triaged
Priority:
Normal
Assignee:
Community Ticket
Target version:
TBD
Affected Versions:
Effort:
Difficulty:
Label:

Description

There is some documentation on Suricata rules (https://suricata.readthedocs.io/en/latest/rules/intro.html), and there have been trainings and a webinar (https://www.youtube.com/watch?v=tvoqFBVSShA), but we still miss a more complete guide which one can follow if they want to learn how to go from some malicious traffic to a rule that could detect such activity.

Related issues 2 (2 open — 0 closed)

Related to Suricata - Documentation #1892: rule docs should include example rulesTriagedCommunity TicketActions
Related to Suricata - Documentation #4662: Add documentation section covering Suricata rule grammarTriagedCommunity TicketActions

JF Updated by Juliana Fajardini Reichow almost 5 years ago Actions
Copy link
 #1

JF Updated by Juliana Fajardini Reichow over 3 years ago Actions
Copy link
 #2

  • Assignee set to Community Ticket
  • Target version changed from TBD to 8.0.0-beta1

VJ Updated by Victor Julien about 2 years ago Actions
Copy link
 #3

  • Target version changed from 8.0.0-beta1 to TBD

PA Updated by Philippe Antoine 20 days ago Actions
Copy link
 #4

  • Status changed from New to Triaged
Actions
Copy link

Also available in: PDF Atom