Snort rules

    Session 7: Understanding Snort Rules Go to the rules folder where you downloaded the VRT certified rules during your Snort install (by default on Windows, this will be C:\Snort\rules). Updated files can be found here: https://www.snort.org/talos Pick one of the named rules files, open it, and choose a rule. If this is your first exposure to Snort rule syntax, please note that the rules are the sometimes-cryptic looking items starting with the word "alert". Copy the rule you pick into your response and describe what the rule means in your own words.