Well,
we've come to the end of this module where we
covered how to manage rule sources,
obtain rule sets and adjust our active rules using suricata‑update.
Let's go to the module summary to review what we learned so far in this course.
In this module, we leveraged suricata‑update to obtain rules from new sources.
We started by evaluating the available open‑source rule sets and
selected two additional sources for our environment.
We used suricata‑update to activate these sources and
obtain the rule sets automatically.
Once we understood the process,
we also added a custom rule source by URL before moving on
to adjusting the configuration files.
We used the configuration files to enable and disable
rules using three different techniques.
We also used other files to modify rule behavior and drop matching traffic.
Now that we understand how to modify rule sources and load rule sets, we're
ready for the next module where we evaluate the rule set effects using a
technique called traffic replay.
I'll see you there.