New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

adopt digitalbond/Quickdraw ICS rules into Malcolm's suricata instance #460

Open

mmguero opened this issue Apr 18, 2024 · 0 comments

Labels

enhancement ics suricata

Milestone

Collaborator

mmguero commented Apr 18, 2024

See:

Tasks:

Examine suricata rules and either modify and add to Malcolm under here or adjust build to pull them in via git clone
Examine snort rules and convert to suricata, then do the same process as in the previous bullet
Examine any new variables that might need to be defined and determine if those need to be defined by the user, or if we can figure them out automatically or what
test based on PCAPs provided by those repos

mmguero added enhancement ics suricata labels

mmguero added this to the z.staging milestone

mmguero modified the milestones: z.staging, v24.06.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment