]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/commitdiff
Revert "ruleset-sources: Remove support for PT Attack Team Detection rules."
authorStefan Schantl <stefan.schantl@ipfire.org>
Mon, 25 Apr 2022 19:15:23 +0000 (21:15 +0200)
committerStefan Schantl <stefan.schantl@ipfire.org>
Mon, 25 Apr 2022 19:15:23 +0000 (21:15 +0200)
The ruleset provider has recovered his github presence.

This reverts commit c8adaee1958ed0c382341e08949d5cb88bd58c7e.

config/suricata/ruleset-sources

index 54a739d18cd39525fd6ec802a7c280ca7e7b38fd..1d2c6e98b2b37d9c9a4b4497782da6b59fc7f886 100644 (file)
@@ -97,6 +97,16 @@ our %Providers = (
                dl_type => "plain",
        },
 
+       # Positive Technologies Attack Detection Team rules.
+       attack_detection => {
+               summary => "PT Attack Detection Team Rules",
+               website => "https://github.com/ptresearch/AttackDetection",
+               tr_string => "attack detection team rules",
+               requires_subscription => "False",
+               dl_url => "https://raw.githubusercontent.com/ptresearch/AttackDetection/master/pt.rules.tar.gz",
+               dl_type => "archive",
+       },
+
        # Secureworks Security rules.
        secureworks_security => {
                summary => "Secureworks Security Ruleset",