Rule Writing Best Practices

This 3-day class is for Sourcefire System customers and open source Snort® users focusing exclusively on the Snort rules language and rule writing. Starting from rule syntax and structure to advanced rule option usage, students will analyze exploit packet captures and put the rule writing theory they learn to work—implementing rule language features to trigger alerts on the offending network traffic. Learn More


Course Schedule