Snort Subscriber Rule Set Update for 07/17/2014

Snort Subscriber Rule Set Update for 07/17/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 18 new rules and made modifications to 20 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Yaser Mansour:
31444
31445
31446
31447
31448
31449
31450

Avery Tarasov:
31442

In VRT's rule release:

The VRT has added and modified multiple rules in the bad-traffic, blacklist, browser-firefox, browser-ie, file-office, file-pdf, malware-cnc, protocol-scada and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at https://www.snort.org/products. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 05/20/2014

Just released:
Sourcefire VRT Certified Snort Rules Update for 05/20/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 16 new rules and made modifications to 31 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov
31034
31035
31036

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-plugins, exploit-kit, file-image, file-office, malware-cnc, protocol-scada, pua-adware and sql rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 04/28/2014, Internet Explorer 0day

Just released:
Sourcefire VRT Certified Snort Rules Update for 04/28/2014


We welcome the introduction of the newest rule release from the VRT. In this release we introduced 30 new rules and made modifications to 10 additional rules.

There were changes made to the snort.conf in this release:

The following port(s) were added to stream5 ports_both, http_inspect, and HTTP_PORTS:
9290

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Yaser Mansour
30795
30796
30824
30825
30826
30827
30828
30829
30830
30831
30832
30833
30834
30835
30836
30837
30838
30839
30840
30841
30842

In VRT's rule release:

Microsoft Security Bulletin 2963983: Internet Explorer suffers from programming errors that may lead to remote code execution. 

Rules to detect attacks targeting these vulnerabilities are included in this release and are identified with GID 1, SIDs 30794 and 30803. 

The Sourcefire VRT has also added and modified multiple rules in the browser-ie, exploit-kit, malware-cnc, protocol-scada and sql rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 02/27/2014

Just released:
Sourcefire VRT Certified Snort Rules Update for 02/27/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 45 new rules and made modifications to 34 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov:
29981


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-ie, browser-webkit, exploit-kit, file-flash, file-identify, file-image, file-java, file-other, file-pdf, malware-backdoor, malware-cnc, protocol-scada, scada and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 02/25/2014

Just released:
Sourcefire VRT Certified Snort Rules Update for 02/25/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 39 new rules and made modifications to 35 additional rules.

There were no changes made to the snort.conf in this release.


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-chrome, browser-ie, browser-webkit, exploit, file-flash, malware-cnc, malware-other, os-windows, protocol-dns, protocol-rpc, protocol-scada and server-other rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 02/14/2014, Microsoft Internet Explorer 10 Vulnerability

Just released:
Sourcefire VRT Certified Snort Rules Update for 02/14/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 8 new rules and made modifications to 16 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

James Lay
29816
29817

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-ie, file-pdf, indicator-compromise, malware-cnc, protocol-scada and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 02/06/2014

Just released:
Sourcefire VRT Certified Snort Rules Update for 02/06/2014


We welcome the introduction of the newest rule release from the VRT. In this release we introduced 25 new rules and made modifications to 19 additional rules.

There were no changes made to the snort.conf in this release.

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-firefox, browser-plugins, browser-webkit, file-flash, file-identify, file-image, file-other, file-pdf, malware-cnc, netbios, protocol-icmp, protocol-scada, pua-adware and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 02/04/2014

Just released:
Sourcefire VRT Certified Snort Rules Update for 02/04/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 108 new rules and made modifications to 91 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Yaser Mansour:
29567
29568
29569


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the bad-traffic, blacklist, browser-chrome, browser-firefox, browser-ie, browser-plugins, browser-webkit, dos, exploit-kit, file-flash, file-java, file-multimedia, file-other, indicator-obfuscation, malware-cnc, netbios, os-windows, protocol-imap, protocol-scada, scada, server-apache and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 01/14/2014, MSTuesday

Just released:
Sourcefire VRT Certified Snort Rules Update for 01/14/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 46 new rules and made modifications to 37 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov:

29349

In VRT's rule release:

Microsoft Security Bulletin MS14-002:
A programming error in the Microsoft Windows Kernel-Mode NDProxy Driver
could lead to an escalation of privilege.

Previously released rules will detect attacks targeting this
vulnerability and have been updated with the appropriate reference
information. They are included in this release and are identified with
GID 1, 28867 through 28872.

The Sourcefire VRT has also added and modified multiple rules in the app-detect, blacklist, exploit-kit, file-office, file-pdf, malware-cnc, os-windows, protocol-dns, protocol-imap, protocol-scada, pua-p2p and web-client rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 01/09/2014

Just released:
Sourcefire VRT Certified Snort Rules Update for 01/09/2014

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 117 new rules and made modifications to 64 additional rules.

There was one change made to the snort.conf in this release:
Port 7071 was added to http_inspect, HTTP_PORTS, and Stream5

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov:
29126
29127
29216
29217
29220
29259
29260
29261
29262
29263
29300

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-ie, browser-plugins, file-flash, file-identify, file-java, file-office, file-other, indicator-obfuscation, malware-cnc, netbios, os-windows, protocol-rpc, protocol-scada, pua-toolbars and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 12/17/2013

Just released:
Sourcefire VRT Certified Snort Rules Update for 12/17/2013

We welcome the introduction of the newest rule release from the VRT. In this release we introduced 76 new rules and made modifications to 30 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Yaser Mansour:
28980
28981
28982
28983
28984
28985
28986
28987
28988

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-ie, browser-plugins, exploit-kit, file-image, file-java, file-multimedia, file-other, file-pdf, indicator-compromise, indicator-obfuscation, malware-backdoor, malware-cnc, protocol-rpc, protocol-scada, pua-adware, server-mail and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 09/03/2013

Just released:
Sourcefire VRT Certified Snort Rules Update for 09/03/2013


We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 35 new rules and made modifications to 30 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov:
27774
27775


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the browser-ie, browser-plugins, exploit-kit, file-executable, file-java, malware-cnc, policy-other, protocol-scada, protocol-tftp, server-apache, server-mail and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 08/27/2013, ftp-data metadata additions

Just released:
Sourcefire VRT Certified Snort Rules Update for 08/27/2013


We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 23 new rules and made modifications to 2421 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

Avery Tarasov:
27680

Yaser Mansour:
27707
27708


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the app-detect, blacklist, browser-chrome, browser-firefox, browser-ie, browser-other, browser-plugins, browser-webkit, exploit-kit, file-executable, file-flash, file-identify, file-image, file-java, file-multimedia, file-office, file-other, file-pdf, indicator-compromise, indicator-obfuscation, indicator-shellcode, malware-backdoor, malware-cnc, malware-other, os-linux, os-mobile, os-windows, policy-other, protocol-scada, server-mail, server-oracle, server-other and sql rule sets to provide coverage for emerging threats from these technologies. 

This release contains over 2400 rule modifications. 

The majority of these are due to the addition of the new metadata service parameter ftp-data.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 08/08/2013

Just released:
Sourcefire VRT Certified Snort Rules Update for 08/08/2013

We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 18 new rules and made modifications to 928 additional rules.

There were no changes made to the snort.conf in this release.


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the app-detect, blacklist, browser-ie, browser-plugins, exploit-kit, file-identify, file-office, file-other, indicator-obfuscation, malware-backdoor, malware-cnc, malware-other, malware-tools, os-mobile, policy-social, protocol-ftp, protocol-imap, protocol-scada, protocol-voip, pua-adware, pua-toolbars, server-apache, server-mysql, server-other and sql rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 07/25/2013

Just released:
Sourcefire VRT Certified Snort Rules Update for 07/25/2013

We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 27 new rules and made modifications to 503 additional rules.

There were no changes made to the snort.conf in this release.

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-chrome, browser-firefox, browser-other, browser-plugins, exploit-kit, file-flash, file-identify, file-java, file-multimedia, file-office, file-other, indicator-obfuscation, indicator-shellcode, malware-backdoor, malware-cnc, malware-other, netbios, os-solaris, protocol-ftp, protocol-imap, protocol-pop, protocol-rpc, protocol-scada, protocol-tftp, protocol-voip, pua-other, server-apache, server-iis, server-mail, server-oracle and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 06/20/2013

Just released:
Sourcefire VRT Certified Snort Rules Update for 06/20/2013

We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 59 new rules and made modifications to 707 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank the following individuals for their contributions, their rules are included in the Community Ruleset:

James Lay & Nathan Fowler:
26948
26947
26949
26950
26951

James Lay:
26965

Avery Tarasov:
26966
26968
26969
26970
26971

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-ie, browser-plugins, dos, exploit, exploit-kit, file-flash, file-image, file-java, file-multimedia, file-office, indicator-compromise, indicator-scan, malware-backdoor, malware-cnc, os-mobile, protocol-dns, protocol-nntp, protocol-rpc, protocol-scada, protocol-snmp, protocol-telnet, protocol-tftp, server-other, server-samba and web-client rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 06/18/2013, New Categories

Just released:
Sourcefire VRT Certified Snort Rules Update for 06/18/2013

We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 28 new rules and made modifications to 48 additional rules.

There were changes made to the snort.conf in this release:

include $RULE_PATH/file-java.rules
include $RULE_PATH/indicator-scan.rules
include $RULE_PATH/os-mobile.rules
include $RULE_PATH/protocol-dns.rules
include $RULE_PATH/protocol-nntp.rules
include $RULE_PATH/protocol-rpc.rules
include $RULE_PATH/protocol-scada.rules
include $RULE_PATH/protocol-snmp.rules
include $RULE_PATH/protocol-telnet.rules
include $RULE_PATH/protocol-tftp.rules
include $RULE_PATH/server-samba.rules

This release introduces new rule categories:

File-Java
Indicator-Scan
Os-Mobile
Protocol-DNS
Protocol-NNTP
Protocol-RPC
Protocol-Scada
Protocol-SNMP
Protocol-Telnet
Protocol-TFTP
Server-Samba


I've went ahead and updated our master snort.conf examples from the VRT on the Snort.conf configuration page: https://www.snort.org/configurations

The VRT would like to thank the following individuals for their contributions:

Avery Tarasov:
26910
26911
26912
26913
26914
26915
26924

Alexandre Menezes:
26916
26917
26918
26919
26920

Paul Bottomley:
26923

Brandon Kendall:
26925


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the blacklist, browser-ie, browser-plugins, file-flash, file-java, file-other, file-pdf, indicator-scan, malware-cnc, malware-other, os-mobile, os-windows, protocol-dns, protocol-ftp, protocol-imap, protocol-nntp, protocol-rpc, protocol-scada, protocol-snmp, protocol-telnet, protocol-tftp, server-other, server-samba and sql rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 04/25/2013

Sourcefire VRT Certified Snort Rules Update for 04/25/2013


We welcome the introduction of the newest rule release from the VRT. In this release we introduced 26 new rules and made modifications to 12 additional rules.

There were changes made to the snort.conf in this release.

The following ports were added to the HTTP_PORTS, stream5 "both" attribute, and http_inspect's "ports" attribute line:

82
83
84
85
86
87
88
89
3057
6080

The lines now look like this (for easy copy and paste):

HTTP_PORTS:
portvar HTTP_PORTS [80,81,82,83,84,85,86,87,88,89,311,383,591,593,631,901,1220,1414,1741,1830,2301,2381,2809,3037,3057,3128,3702,4343,4848,5250,6080,6988,7000,7001,7144,7145,7510,7777,7779,8000,8008,8014,8028,8080,8085,8088,8090,8118,8123,8180,8181,8222,8243,8280,8300,8800,8888,8899,9000,9060,9080,9090,9091,9443,9999,11371,34443,34444,41080,50002,55555] 

Stream5:
ports both 80 81 82 83 84 85 86 87 88 89 110 311 383 443 465 563 591 593 631 636 901 989 992 993 994 995 1220 1414 1830 2301 2381 2809 3037 3057 3128 3702 4343 4848 5250 6080 6988 7907 7000 7001 7144 7145 7510 7802 7777 7779 \ 7801 7900 7901 7902 7903 7904 7905 7906 7908 7909 7910 7911 7912 7913 7914 7915 7916 \ 7917 7918 7919 7920 8000 8008 8014 8028 8080 8085 8088 8090 8118 8123 8180 8222 8243 8280 8300 8800 8888 8899 9000 9060 9080 9090 9091 9443 9999 11371 34443 34444 41080 50002 55555 

http_inspect:
ports { 80 81 82 83 84 85 86 87 88 89 311 383 591 593 631 901 1220 1414 1741 1830 2301 2381 2809 3037 3057 3128 3702 4343 4848 5250 6080 6988 7000 7001 7144 7145 7510 7777 7779 8000 8008 8014 8028 8080 8085 8088 8090 8118 8123 8180 8181 8222 8243 8280 8300 8800 8888 8899 9000 9060 9080 9090 9091 9443 9999 11371 34443 34444 41080 50002 55555 }

And as indicated here: http://blog.snort.org/2013/04/master-snortconf-configurations-have.html, the snort.conf configurations that we distribute have been updated.

In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the browser-other, browser-plugins, exploit-kit, file-flash, file-identify, file-multimedia, file-other, file-pdf, malware-cnc, scada and server-webapp rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 04/16/2013

Just released:
Sourcefire VRT Certified Snort Rules Update for 04/16/2013

We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 37 new rules and made modifications to 315 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank Avery Tarasov for their contribution in the development of rule(s):
26398

The VRT would like to thank Yaser Mansour for their contribution in the development of rule(s):
26395
26396
26399
26400
26401
26402
26403
26404
26405
26406
26407
26408
26409
26411
26412
26413


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the app-detect, blacklist, browser-ie, browser-other, browser-plugins, dos, exploit, exploit-kit, file-flash, file-identify, file-image, file-multimedia, file-office, file-other, indicator-compromise, indicator-obfuscation, malware-backdoor, malware-cnc, malware-other, netbios, nntp, os-windows, policy-other, policy-social, protocol-ftp, protocol-imap, protocol-voip, scada, server-iis, server-other and web-misc rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!

Sourcefire VRT Certified Snort Rules Update for 04/11/2013

Just released: Sourcefire VRT Certified Snort Rules Update for 04/11/2013

We welcome the introduction of the newest rule release for today from the VRT. In this release we introduced 16 new rules and made modifications to 820 additional rules.

There were no changes made to the snort.conf in this release.

The VRT would like to thank James Lay for his contributions in the creation of the following rules:
26380
26381
26382


In VRT's rule release:

The Sourcefire VRT has added and modified multiple rules in the app-detect, blacklist, browser-firefox, browser-ie, browser-other, browser-plugins, browser-webkit, dns, dos, exploit-kit, file-executable, file-identify, file-multimedia, file-office, file-other, file-pdf, malware-backdoor, malware-cnc, malware-other, netbios, os-windows, policy-other, protocol-ftp, protocol-pop, protocol-voip, rpc, scada, server-apache, server-iis, server-mssql, server-mysql, server-other, server-webapp and web-client rule sets to provide coverage for emerging threats from these technologies.

In order to subscribe now to the VRT's newest rule detection functionality, you can subscribe for as low as $29 US dollars a year for personal users, be sure and see our business pricing as well at http://www.snort.org/store. Make sure and stay up to date to catch the most emerging threats!