docker: Enable Stamus Lateral ruleset by default

Disable PT research by default
StamusNetworks · Apr 30, 2024 · 071f234 · 071f234
1 parent 4f64110
commit 071f234
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/docker/scirius/bin/start-scirius.sh b/docker/scirius/bin/start-scirius.sh
@@ -42,8 +42,7 @@ create_db() {
 
     python manage.py createcachetable my_cache_table
     python manage.py addsource "ETOpen Ruleset" https://rules.emergingthreats.net/open/suricata-5.0/emerging.rules.tar.gz http sigs
-    python manage.py addsource "SSLBL abuse.ch" https://sslbl.abuse.ch/blacklist/sslblacklist.rules http sig
-    python manage.py addsource "PT Research Ruleset" https://github.com/ptresearch/AttackDetection/raw/master/pt.rules.tar.gz http sigs
+    python manage.py addsource "Lateral movement ruleset" https://ti.stamus-networks.io/open/stamus-lateral-rules.tar.gz
     python manage.py defaultruleset "Default ruleset"
     python manage.py disablecategory "Default ruleset" stream-events
     python manage.py addsuricata suricata "Suricata" /rules "Default ruleset"