netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

IDPS - ruleset : add copy of some rule files which are being shipped empty in et-pro telemetry. closes https://github.com/opnsense/core/issues/4914

Browse Source
This commit is contained in:
Ad Schellevis
2021-04-12 09:21:21 +02:00
parent f7bc50cb2b
commit cf2ca4761d
3 changed files with 27 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
security/intrusion-detection-content-et-open/Makefile
+8
View File
@@ -0,0 +1,8 @@
PLUGIN_NAME= intrusion-detection-content-et-open
PLUGIN_VERSION= 1.0.0
#PLUGIN_REVISION= 1
PLUGIN_COMMENT= IDS Proofpoint ET open ruleset, duplicates some rule files which are being delivered empty in ET Pro Telemetry edition so both can be installed
PLUGIN_MAINTAINER= ad@opnsense.org
PLUGIN_WWW= https://rules.emergingthreats.net/
.include "../../Mk/plugins.mk"
security/intrusion-detection-content-et-open/pkg-descr
+5
View File
@@ -0,0 +1,5 @@
IDS Proofpoint ET open ruleset, duplicates some rule files which are being delivered empty in ET Pro Telemetry edition so both can be installed
LICENSE: https://www.proofpoint.com/us/license
WWW: https://www.proofpoint.com/us/blog/threat-insight
security/intrusion-detection-content-et-open/src/opnsense/scripts/suricata/metadata/rules/et-open-extra.xml
+14
View File
@@ -0,0 +1,14 @@
<?xml version="1.0"?>
<ruleset documentation_url="http://doc.emergingthreats.net/bin/view/Main/EmergingFAQ">
<location url="https://rules.emergingthreats.net/open/suricata-4.0/emerging.rules.tar.gz" prefix="ET open"/>
<version url="https://rules.emergingthreats.net/open/suricata-4.0/version.txt"/>
<files>
<file description="botcc.portgrouped" url="inline::rules/botcc.portgrouped.rules"et_open-botcc.portgrouped.rules</file>
<file description="botcc" url="inline::rules/botcc.rules">et_open.botcc.rules</file>
<file description="ciarmy" url="inline::rules/ciarmy.rules">et_open.ciarmy.rules</file>
<file description="compromised" url="inline::rules/compromised.rules">et_open.compromised.rules</file>
<file description="drop" url="inline::rules/drop.rules">et_open.drop.rules</file>
<file description="dshield" url="inline::rules/dshield.rules">et_open.dshield.rules</file>
<file description="tor" url="inline::rules/tor.rules">et_open.tor.rules</file>
</files>
</ruleset>