IDS PT Research ruleset (only for non-commercial use)

[hushcoden]

Before installing that, can anyone please explain what does this rule-set provide more than the standard open rule-set that I'm using ?

Tia.

[siga75]

just more rules, that's worthy :)

my understanding is the rules discovered by the community are free, the PRO are not, this does not means PRO rules are more important or critical stuff, but I have several finding, as an example the last I can see are those blocked connection:

ETPRO TROJAN ZxShell PortScan Command
ETPRO EXPLOIT revslider_show_image Plugin Local File Inclusion Exploit Attempt

without PRO rules this would have not been detected and blocked

[hushcoden]

I'm currently using the ET Open rule-set, but if you look at the plugin section you'll see not just the Pro rule-set but also the ones as per my subject, hence I'm bit confused of what the differences are between ET Open / ET Pro and that PT Research ruleset...

Thanks.

[siga75]

sorry I misread the topic.

that's actually a good question...

I only know I installed them