suricata-intel-index icon indicating copy to clipboard operation
suricata-intel-index copied to clipboard

Published 20 hours ago • verified publisher icon OISF

abuse.ch: rename ssl and ja3 blacklists - v1

Open jasonish opened this issue 3 years ago • 0 comments

Rename the following abuse.ch rulesets:

  • sslbl/ssl-fp-blacklist -> abuse.ch/ssl-blacklist
  • sslbl/ja3-fingerprints -> abuse.ch/ja3-blacklist

This keeps the old entries around to keep compatibility with older versions of suricata-update, but marks them as deprecated which newer suricata-update will recognize and suppress from listing.

jasonish avatar Sep 09 '20 19:09 jasonish