Jalim Duniya comments

Repositories
Issues
Comments

Results 5 comments of


                                            Jalim Duniya

Added MS Powershell rules

Hi @Bob-Andrews I tried to copy this rule in my setup as I was looking for same use cases but it is showing duplicate entries. ossec-analysisd: ERROR: Duplicate rule ID:88201

so-rule-update does not trust internal proxy certificates

It only works with `docker exec so-idstools /bin/bash -c "CURL_CA_BUNDLE=''; cd /opt/so/idstools/etc && idstools-rulecat --url http://:port/emerging.rules.tar.gz"`

so-rule-update does not trust internal proxy certificates

Can we have rule for dnscat2 please

Sorry for the delay in response. Emailed pcap.

no module nmap

I am able to fix this using pip install python-nmap==0.6.4 (older version)