Open Information Security Foundation

02/02/2018

02:47 AM Suricata Support #2431: Change priority

I modify rules by sids every day but I haven't known that I can write like this "modifysid mobile_malware.rules ...".... Roman Karpyuk

02/01/2018

08:59 AM Suricata Support #2431 (Closed): Change priority

Dear colleagues,
can I change priority for set of rules or change type of action from "alert" to "drop" for all rule... Roman Karpyuk

01/04/2018

11:59 AM Suricata Support #2401 (Closed): Detect last CPU's vulnerabilities

Dear colleagues,
please confirm if Suricata with last ET Pro rules can detect Meltdown и Spectre (CVE-2017-5754, C... Roman Karpyuk

11/20/2017

08:56 AM Suricata Support #2271: eve-log (JSON) correlation

Thanks, I will learn your information.
And one more question. Can I logging alerts with priority=1 by eve.json wit... Roman Karpyuk

11/17/2017

03:06 AM Suricata Support #2271: eve-log (JSON) correlation

"In addition, if you enable 'metadata' in the alert record you get a lot of these records with the alert record." - a... Roman Karpyuk

11/16/2017

06:05 AM Suricata Support #2271 (Closed): eve-log (JSON) correlation

Hi guys,
please provide some information, if I can combine different event_type to one event.
For example, I have ... Roman Karpyuk

05/31/2017

03:04 AM Suricata Support #2120: Disable rule-set emerging-chat.rules.

I think, that isn't problem with oinkmaster, because all another rules have been modified excellent.
What do you mea... Roman Karpyuk

05/30/2017

03:57 AM Suricata Support #2120 (Closed): Disable rule-set emerging-chat.rules.

Hi guys,
I have some stupid problem, I want to disable emerging-chat.rules. But when I comment line with this rule-s... Roman Karpyuk

05/05/2017

02:13 AM Suricata Support #2106: Managment rules on different nodes.

I thought so, thanks for your answer! Roman Karpyuk

05/04/2017

09:33 AM Suricata Support #2106 (Closed): Managment rules on different nodes.

Hi guys,
Can I deploy/update/etc rules on different nodes from one place?
If yes - how? Roman Karpyuk