worked poc

2026-08-14 11:33:01 +02:00
parent adfdb0b86c
commit fc3a2944b2
94 changed files with 2931 additions and 3412 deletions
@@ -0,0 +1,12 @@
+# Managed Suricata threshold/suppression configuration.
+#
+# Keep this file environment-specific. Examples:
+#
+# Suppress one known false-positive SID completely:
+# suppress gen_id 1, sig_id 1234567
+#
+# Suppress a SID only for a trusted host/network:
+# suppress gen_id 1, sig_id 1234567, track by_src, ip 192.168.100.10
+#
+# Limit a noisy SID to one alert per source every 5 minutes:
+# threshold gen_id 1, sig_id 1234567, type limit, track by_src, count 1, seconds 300