From 60d35cf8bce36b7dc5189257094b5bf2535efc11 Mon Sep 17 00:00:00 2001
From: 0nnyx <54419678+0nnyx@users.noreply.github.com>
Date: Mon, 5 Feb 2024 09:21:32 +0100
Subject: [PATCH] Update et-open-extra.xml (#3795)

Avoid duplicate 3coresec and threatview_CS_c2
Tested and working properly now :
	ET open/3coresec	not installed
	ET open/botcc	not installed
	ET open/botcc.portgrouped	not installed
	ET open/ciarmy	not installed
	ET open/compromised	not installed
	ET open/drop	not installed
	ET open/dshield	not installed
	ET open/emerging-activex	not installed
	ET open/emerging-adware_pup	not installed
	ET open/emerging-attack_response	not installed
	ET open/emerging-chat	not installed
	ET open/emerging-coinminer	not installed
	ET open/emerging-current_events	not installed
	ET open/emerging-deleted	not installed
	ET open/emerging-dns	not installed
	ET open/emerging-dos	not installed
	ET open/emerging-exploit	not installed
	ET open/emerging-exploit_kit	not installed
	ET open/emerging-ftp	not installed
	ET open/emerging-games	not installed
	ET open/emerging-hunting	not installed
	ET open/emerging-icmp	not installed
	ET open/emerging-icmp_info	not installed
	ET open/emerging-imap	not installed
	ET open/emerging-inappropriate	not installed
	ET open/emerging-info	not installed
	ET open/emerging-ja3	not installed
	ET open/emerging-malware	not installed
	ET open/emerging-misc	not installed
	ET open/emerging-mobile_malware	not installed
	ET open/emerging-netbios	not installed
	ET open/emerging-p2p	not installed
	ET open/emerging-phishing	not installed
	ET open/emerging-policy	not installed
	ET open/emerging-pop3	not installed
	ET open/emerging-rpc	not installed
	ET open/emerging-scada	not installed
	ET open/emerging-scan	not installed
	ET open/emerging-shellcode	not installed
	ET open/emerging-smtp	not installed
	ET open/emerging-snmp	not installed
	ET open/emerging-sql	not installed
	ET open/emerging-telnet	not installed
	ET open/emerging-tftp	not installed
	ET open/emerging-user_agents	not installed
	ET open/emerging-voip	not installed
	ET open/emerging-web_client	not installed
	ET open/emerging-web_server	not installed
	ET open/emerging-web_specific_apps	not installed
	ET open/emerging-worm	not installed
	ET open/threatview_CS_c2	not installed
	ET open/tor	not installed
---
 .../scripts/suricata/metadata/rules/et-open-extra.xml         | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/security/intrusion-detection-content-et-open/src/opnsense/scripts/suricata/metadata/rules/et-open-extra.xml b/security/intrusion-detection-content-et-open/src/opnsense/scripts/suricata/metadata/rules/et-open-extra.xml
index 16c75ae96..4c8898938 100644
--- a/security/intrusion-detection-content-et-open/src/opnsense/scripts/suricata/metadata/rules/et-open-extra.xml
+++ b/security/intrusion-detection-content-et-open/src/opnsense/scripts/suricata/metadata/rules/et-open-extra.xml
@@ -3,7 +3,7 @@
     <location url="https://rules.emergingthreats.net/open/suricata-7.0/emerging.rules.tar.gz" prefix="ET open"/>
     <version url="https://rules.emergingthreats.net/open/suricata-7.0/version.txt"/>
     <files>
-        <file description="3coresec" url="inline::rules/3coresec.rules">et_open.3coresec.rules</file>
+        <file description="3coresec" url="inline::rules/3coresec.rules">3coresec.rules</file>
         <file description="botcc.portgrouped" url="inline::rules/botcc.portgrouped.rules">et_open-botcc.portgrouped.rules</file>
         <file description="botcc" url="inline::rules/botcc.rules">et_open.botcc.rules</file>
         <file description="ciarmy" url="inline::rules/ciarmy.rules">et_open.ciarmy.rules</file>
@@ -54,6 +54,6 @@
         <file description="emerging-web_specific_apps" url="inline::rules/emerging-web_specific_apps.rules">et_open.emerging-web_specific_apps.rules</file>
         <file description="emerging-worm" url="inline::rules/emerging-worm.rules">et_open.emerging-worm.rules</file>
         <file description="tor" url="inline::rules/tor.rules">et_open.tor.rules</file>
-        <file description="threatview_CS_c2" url="inline::rules/threatview_CS_c2.rules">et_open.threatview_CS_c2.rules</file>
+        <file description="threatview_CS_c2" url="inline::rules/threatview_CS_c2.rules">threatview_CS_c2.rules</file>
     </files>
 </ruleset>