Add support for 6.0.23

This commit is contained in:
Paul Tyng
2020-10-19 11:13:51 -04:00
parent 020dad41e7
commit abc676f62b
84 changed files with 2131 additions and 252 deletions

View File

@@ -0,0 +1,62 @@
{
"enabled_categories": [
"emerging-activex|emerging-attackresponse|botcc|emerging-chat|ciarmy|compromised|emerging-dns|emerging-dos|dshield|emerging-exploit|emerging-ftp|emerging-games|emerging-icmp|emerging-icmpinfo|emerging-imap|emerging-inappropriate|emerging-info|emerging-malware|emerging-misc|emerging-mobile|emerging-netbios|emerging-p2p|emerging-policy|emerging-pop3|emerging-rpc|emerging-scada|emerging-scan|emerging-shellcode|emerging-smtp|emerging-snmp|emerging-sql|emerging-telnet|emerging-tftp|tor|emerging-trojan|emerging-useragent|emerging-voip|emerging-webapps|emerging-webclient|emerging-webserver|emerging-worm"
],
"endpoint_scanning": "true|false",
"ips_mode": "ids|ips|ipsInline|disabled",
"restrict_tor": "true|false",
"restrict_torrents": "true|false",
"restrict_ip_addresses": "true|false",
"suppression": {
"alerts": [
{
"category": "",
"gid": "[\\d]+",
"id": "[\\d]+",
"signature": "",
"tracking": [
{
"direction": "both|src|dest",
"mode": "ip|subnet|network",
"value": ""
}
],
"type": "all|track"
}
],
"whitelist": [
{
"direction": "both|src|dest",
"mode": "ip|subnet|network",
"value": ""
}
]
},
"dns_filtering": "true|false",
"dns_filters": [
{
"name": "",
"description": "",
"filter": "none|work|family",
"network_id": "",
"version": "v4|v6",
"allowed_sites": [
"^[a-zA-Z0-9.-]+$|^$"
],
"blocked_sites": [
"^[a-zA-Z0-9.-]+$|^$"
],
"blocked_tld": [
"^[a-zA-Z0-9.-]+$|^$"
]
}
],
"honeypot_enabled": "true|false",
"honeypot": [
{
"network_id": "",
"ip_address": "",
"version": "v4|v6"
}
]
}