The latest SNORTⓇ rule release is out this morning, courtesy of Cisco Talos.
Today's rule update includes several new rules protecting against some of the most prevalent malware families in the wild. There are two rules, specifically, for the ever-present Emotet botnet, which is surging at the end of 2020 after a somewhat quiet summer and fall period.
|Shared object rules
|Modified shared object rules
snort.conf in this release.
Talos's rule release:
Talos has added and modified multiple rules in the browser-firefox, browser-ie, file-other, malware-cnc, malware-other, os-windows and server-webapp rule sets to provide coverage for emerging threats from these technologies.