Project

General

Profile

Actions
Copy link

Feature #2785

open

rules index update - add JA3 / SSL IP sources

Added by Peter Manev almost 6 years ago. Updated over 5 years ago.

Status:
New
Priority:
Normal
Assignee:
Jason Ish
Target version:
-
Effort:
Difficulty:
Label:

Description

The following public sets are also available form https://sslbl.abuse.ch/blacklist/ for Suricata 4.1.0+ :

JA3:
https://sslbl.abuse.ch/blacklist/ja3_fingerprints.rules

SSLIP
https://sslbl.abuse.ch/blacklist/sslipblacklist.rules

Maybe we can consider adding those to - https://www.openinfosecfoundation.org/rules/index.yaml

Actions
Copy link
 #1

Updated by Victor Julien over 5 years ago

  • Project changed from Suricata to Suricata-Update
Actions
Copy link
 #2

Updated by Andreas Herz over 5 years ago

  • Assignee set to Jason Ish
Actions
Copy link

Also available in: Atom PDF