Forum Discussion

JustCooLpOOLe's avatar
JustCooLpOOLe
Icon for Cirrocumulus rankCirrocumulus
Feb 08, 2022

YARA and SNORT Conversion to ASM/AWAF Custom Signatures

Hi, Does anyone have any links or knowledge around converting YARA and/or SNORT rules into ASM/AWAF custom signatures?  Using 15.1.5 at the moment but was curious if this has been successful.  I've ...
security
Lidev's avatar
Lidev
Icon for Nacreous rankNacreous
Feb 15, 2022

Hi,

You can use ipp option to create custom bot signature (The ipp option is analogous to the Snort keyword pcre)
more details here : Asm Attack and bot signatures syntax 

Regards