Thursday, March 28, 2013

Sourcefire VRT Certified Snort Rules Update for 03/28/2013

Just released: Sourcefire VRT Certified Snort Rules Update for 03/28/2013

We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 57 new rules and made modifications to 615 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank Avery Tarasov for his submission of the rules:
These rules are also included in the Community rule pack.

In VRT's rule release:
The Sourcefire VRT has added and modified multiple rules in the app-detect, blacklist, browser-other, deleted, dns, dos, exploit, exploit-kit, file-executable, file-identify, file-multimedia, file-other, file-pdf, indicator-compromise, indicator-shellcode, malware-backdoor, malware-cnc, malware-other, misc, netbios, os-linux, os-other, os-solaris, os-windows, policy-other, policy-social, protocol-finger, protocol-ftp, protocol-icmp, protocol-pop, protocol-services, pua-other, pua-p2p, rpc, scan, server-iis, server-mail, server-mssql, server-mysql, server-other, server-webapp, snmp, sql, telnet and x11 rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at Make sure and stay up to date to catch the most emerging threats!