Well,
we've come to the end of this first module where we
discussed the terms rule sets and rule sources.
We covered the high‑level of topics overall and discussed the
techniques we'll use to manage rules on our Suricata server
throughout the rest of this course.
Before we move on,
let's take a look at the summary and review what we
learned so far in this course.
In this module, we covered open‑source rules.
We discussed what open‑source rules were and the advantages of
using pre‑written rule sets provided by security organizations to
quickly configure our Suricata server.
We also discussed how we could use suricata‑update to select
the appropriate sources of these rules and automate the
process of obtaining rule sets.
Once we understood the foundational concepts,
we took a closer look at the emerging threats rule set we obtained in the
Getting Started course. We discussed the available categories of rules and
discovered the appropriate rules for our environment.
Now that we've reached the end of this module,
you should have a working lab environment to use for each of the
demos in the remaining modules. You should also be comfortable with
the concept of rule sets and rule sources and how we'll manage these
throughout the rest of the course.
In the next module,
we're going to build on these concepts by leveraging suricata‑update to
obtain additional rule sets and manage sources in Suricata.