Suricata

        {
          "name": "content",
          "content": {
            "pattern": "neg",
            "length": 3,
            "nocase": false,
            "negated": true,
            "starts_with": false,
            "ends_with": false,
            "is_mpm": false,
            "no_double_inspect": false,
            "distance": 18446744073709552000,
            "within": 4,
            "fast_pattern": false,
            "relative_next": false
          }
        },