Re: Feature Request: Being able to modify rules such as 138:4 for sensitive data using modifysid.conf

31 views
Skip to first unread message

JJC

unread,
Oct 29, 2012, 9:41:06 AM10/29/12
to pulledpo...@googlegroups.com
Makes perfect sense, If you would add this to the bugtracker I'll be sure to mark it as a feature request and get it slated for addition.

On Friday, October 19, 2012 7:33:38 AM UTC-6, KingOfNerds wrote:
As I understand it, it is currently not possible to put in modifications for the GID:SID format of rules in modifysid, just the for the rules which  are GID 1.

For instance, I would like to be able to modify the threshold on the rules for email detection so that it is higher than 20 email addresses, or more than 1 credit card number, since I am getting a lot of false positives from these rules.

Thanks

Jack

unread,
Oct 29, 2012, 10:25:17 AM10/29/12
to pulledpo...@googlegroups.com

Where can I find the bug tracker ?

> --
> You received this message because you are subscribed to the Google Groups "pulledpork users" group.
> To view this discussion on the web visit https://groups.google.com/d/msg/pulledpork-users/-/MKh94HAo53AJ.
>
> To post to this group, send email to pulledpo...@googlegroups.com.
> To unsubscribe from this group, send email to pulledpork-use...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/pulledpork-users?hl=en.

JJC

unread,
Oct 29, 2012, 10:30:42 AM10/29/12
to pulledpo...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages