IDS PT Research ruleset (only for non-commercial use)

[hushcoden]

Before installing that, can anyone please explain what does this rule-set provide more than the standard open rule-set that I'm using ?

Tia.

[siga75]

just more rules, that's worthy

my understanding is the rules discovered by the community are free, the PRO are not, this does not means PRO rules are more important or critical stuff, but I have several finding, as an example the last I can see are those blocked connection:

ETPRO TROJAN ZxShell PortScan Command
ETPRO EXPLOIT revslider_show_image Plugin Local File Inclusion Exploit Attempt

without PRO rules this would have not been detected and blocked

[hushcoden]

I'm currently using the ET Open rule-set, but if you look at the plugin section you'll see not just the Pro rule-set but also the ones as per my subject, hence I'm bit confused of what the differences are between ET Open / ET Pro and that PT Research ruleset...

Thanks.

[siga75]

sorry I misread the topic.

that's actually a good question...

I only know I installed them