Well, we've come to the end of this module
introducing you to Snort rule writing.
Let's take a look at the summary to review what we
learned so far in this course.
We started out this module discussing the course scenario and
lab setup that we're using in the demos.
We then discussed the purpose behind writing our own custom
rules with a few scenarios where it has value.
Once we understood the purpose behind custom rules,
we wrote our own rules based on security goals and then tested them
against target traffic to verify that alerts were generated.
If you're new to Snort rule writing,
I hope you leave this module understanding the basic parts and are able to
identify where to add additional capabilities as we expand the list of
features we leverage. If you're ready to move on,
will add more rule options to target more specific traffic and
reduce false positives in the next module.