I think should be better have a list of rules inside attack pattern group and possiblity to disable single rules insted search specific id and create advanced modification rules.
Recently snort add rules that wasn't present in Astaro list and was difficult to identify rules id.
Guest User!
You are not Sophos Staff.
