The following changes made to the
snort.confin this release, these can be added to the bottom of the
snort.confwhere the rule declarations are made:
In VRT's rule release:
Synopsis: This release introduces eleven new rule categories and contains new and modified rules in several categories.
Details: This release introduces eleven new rule categories:
These categories have been populated with rules that were formerly in policy.rules, leaving 36 rules in that category. These will be moved in the near future
This release contains new and modified rules in the backdoor, botnet-cnc, dos, exploit, file-identify, file-office, file-other, file-pdf, indicator-compromise, indicator-obfuscation, mysql, policy-multimedia, policy-other, policy-social, pua-p2p, pua-toolbars, server-mail, specific-threats, spyware-put, voip, web-client and web-php rule sets to provide coverage for emerging threats from these technologies.In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!