{"id":2038,"date":"2022-10-31T20:56:13","date_gmt":"2022-10-31T19:56:13","guid":{"rendered":"https:\/\/blog.mhasin.eu\/?p=2038"},"modified":"2022-10-31T20:56:14","modified_gmt":"2022-10-31T19:56:14","slug":"suricata-rule-list","status":"publish","type":"post","link":"https:\/\/blog.mhasin.eu\/?p=2038","title":{"rendered":"Suricata rule list"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Free rule list for suricata<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Emerging Threats Open Ruleset &#8211; Suricata<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;rules.emergingthreats.net\/open\/suricata-6\/emerging-all.rules.tar.gz\n<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Positive Technologies Attack Detection Team Ruleset<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;raw.githubusercontent.com\/ptresearch\/AttackDetection\/master\/pt.rules.tar.gz<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Abuse.ch SSL Blacklist Suricata Ruleset<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;sslbl.abuse.ch\/blacklist\/sslblacklist_tls_cert.tar.gz<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>abuse.ch SSLBL Snort \/ Suricata Botnet C2 IP Ruleset<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;sslbl.abuse.ch\/blacklist\/sslipblacklist.tar.gz\n<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>Abuse.ch Suricata JA3 Fingerprint Ruleset<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;sslbl.abuse.ch\/blacklist\/ja3_fingerprints.tar.gz<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>@travisbgreen Threat hunting Ruleset<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;raw.githubusercontent.com\/travisbgreen\/hunting-rules\/master\/hunting.rules<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>OISF Suricata Traffic ID Ruleset<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;openinfosecfoundation.org\/rules\/trafficid\/trafficid.rules<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>abuse.ch Feodo Tracker Botnet C2 IP<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;feodotracker.abuse.ch\/downloads\/ipblocklist.csv<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>abuse.ch SSLBL Botnet C2 IP Blacklist<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;sslbl.abuse.ch\/blacklist\/sslipblacklist.csv<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li>abuse.ch ThreatFox IOCs feed<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;threatfox-api.abuse.ch\/api\/v1\/<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\\<\/p>\n<div class=\"pdf24Plugin-cp\"> \t<form name=\"pdf24Form0\" method=\"post\" action=\"https:\/\/doc2pdf.pdf24.org\/wordpress.php\" target=\"pdf24PopWin\" onsubmit=\"var pdf24Win = window.open('about:blank', 'pdf24PopWin', 'resizable=yes,scrollbars=yes,width=600,height=250,left='+(screen.width\/2-300)+',top='+(screen.height\/3-125)+''); pdf24Win.focus(); if(typeof pdf24OnCreatePDF === 'function'){void(pdf24OnCreatePDF(this,pdf24Win));}\"> \t\t<input type=\"hidden\" name=\"blogCharset\" value=\"Cw1x07UAAA==\" \/><input type=\"hidden\" name=\"blogPosts\" value=\"MwQA\" \/><input type=\"hidden\" name=\"blogUrl\" value=\"yygpKSi20tdPyslP18vNSCzOzNNLLQUA\" \/><input type=\"hidden\" name=\"blogName\" value=\"c\/LxdwcA\" \/><input type=\"hidden\" name=\"blogValueEncoding\" value=\"gzdeflate base64\" \/><input type=\"hidden\" name=\"postId_0\" value=\"MzIwtgAA\" \/><input type=\"hidden\" name=\"postTitle_0\" value=\"Cy4tykxOLElUKCrNSVXIySwuAQA=\" \/><input type=\"hidden\" name=\"postLink_0\" value=\"yygpKSi20tdPyslP18vNSCzOzNNLLdW3L7A1MjC2AAA=\" \/><input type=\"hidden\" name=\"postAuthor_0\" value=\"y00syfcwNAIA\" \/><input type=\"hidden\" name=\"postDateTime_0\" value=\"MzIwMtI1NNA1NlQwMrAyBCJjAA==\" \/><input type=\"hidden\" name=\"postContent_0\" value=\"7Zbfb9owEMff+StOrdS3xKKdtmllaNAOiakS1eBxEjLOJfEwdmRfoNpfP+d3EdJEoe3T8kAwOd\/3PvJ9j\/QGGQjFnft6scuClTJiHWTc8sTyLL0YTiwi2FwhKOkIYmPB5VYKTnzAsmHPX\/9O0Ebl6iCsSOkjlBx+36BNpE5gkVrk5GCWoYafXtchwdXl5+t+\/xbmrbLfMmC5qvUtHqQWJkKfurgNU6LMfbm6\/PDptvwocFyItSRViqFGYsarsoYv+MiamIArFVbbiNsw+dMbsDK1p7N4BN+jcZLkFmGBItVGmUSigxERF2u4R0JB0mj\/lG8a6nMh+S5MJKX5KndohdGEmkJhNiwj6\/NzK1JWFdDqsw13hNZH7MG+kHVUKIYihfn8AcbKC5St0xzeK\/E5p1Yq5LUWWzU6rHxQL5ak3FKgpdNI+DOS8QPMtbEErCMZG\/JdA3fXMH18ByyZtcsT27A7mgbhx+gGJr7D0WZWanprit\/8Zhl3cid22DeyfCvdKvHDSdcjA9JcUzFB3to+z7VZLRqUdmnsU\/9YeeiFaLPpfNKdzsLyOJYCpvevhFUMOKlj41DEJtcRL2wfGpuwioAqQRl1307CaJ0zQROZgkOs0e4Z5kySuEhMVd6u0yKz08rwyLHCLKY2i3Db85y\/Z\/R2pL2T1c+ovrLGxDzBdHbnIEaMziy6+reMzVPAM9kV7xds22eHdR73bvA\/6qioX2XYXw==\" \/> \t\t<a href=\"https:\/\/www.pdf24.org\" target=\"_blank\" title=\"www.pdf24.org\" rel=\"nofollow\"><img src=\"https:\/\/blog.mhasin.eu\/wp-content\/plugins\/pdf24-post-to-pdf\/img\/pdf_32x32.png\" alt=\"\" border=\"0\" height=\"32\" \/><\/a> \t\t<span class=\"pdf24Plugin-cp-space\">&nbsp;&nbsp;<\/span> \t\t<span class=\"pdf24Plugin-cp-text\">Send article as PDF<\/span> \t\t<span class=\"pdf24Plugin-cp-space\">&nbsp;&nbsp;<\/span> \t\t<input class=\"pdf24Plugin-cp-input\" style=\"margin: 0px;\" type=\"text\" name=\"sendEmailTo\" placeholder=\"Enter email address\" \/> \t\t<input class=\"pdf24Plugin-cp-submit\" style=\"margin: 0px;\" type=\"submit\" value=\"Send\" \/> \t<\/form> <\/div>","protected":false},"excerpt":{"rendered":"Free rule list for suricata Emerging Threats Open Ruleset &#8211; Suricata Positive Technologies Attack Detection Team Ruleset Abuse.ch SSL Blacklist Suricata Ruleset abuse.ch SSLBL Snort \/ Suricata Botnet C2 IP Ruleset Abuse.ch Suricata JA3 Fingerprint Ruleset @travisbgreen Threat hunting Ruleset OISF Suricata Traffic ID Ruleset abuse.ch Feodo Tracker Botnet C2 IP abuse.ch SSLBL Botnet C2 IP Blacklist abuse.ch ThreatFox IOCs feed \\ &nbsp;&nbsp; Send article as PDF &nbsp;&nbsp;\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"arc_restricted_post":false,"footnotes":""},"categories":[10],"tags":[],"class_list":["post-2038","post","type-post","status-publish","format-standard","hentry","category-zabezpecenie"],"_links":{"self":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/2038","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2038"}],"version-history":[{"count":1,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/2038\/revisions"}],"predecessor-version":[{"id":2039,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=\/wp\/v2\/posts\/2038\/revisions\/2039"}],"wp:attachment":[{"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2038"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2038"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mhasin.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2038"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}