Use "TGI HUNT" instead of "SURICATA" on some rules.
jasonish opened this issue · comments
Hi Travis,
I got really confused as to where some "SURICATA TLS on unusual port" alerts were coming from and traced them back to this rule set. Any chance you could prefix these with "TGI HUNT" as well?
Thanks.
I'll probably just delete them, they exist elsewhere for those that want
them.
…On Fri, Apr 17, 2020 at 12:41 PM Jason Ish ***@***.***> wrote:
Hi Travis,
I got really confused as to where some "SURICATA TLS on unusual port"
alerts were coming from and traced them back to this rule set. Any chance
you could prefix these with "TGI HUNT" as well?
Thanks.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#4>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AALCHHNLZWPB2CDU5QZNBQTRNCPHFANCNFSM4MK6THVA>
.
--
(406) 284-1911
travisgreen.net
PGP key <http://travisgreen.net/assets/travis@travisgreen.net.asc>
calendly.com/travisgreen
deleted