suricata http.uri http.response_body - SERP Analysis

https://docs.suricata.io/en/latest/rules/http-keywords.html

https://docs.suricata.io/en/suricata-7.0.3/rules/http-keywords.html

https://redmine.openinfosecfoundation.org/projects/suricata/wiki/HTTP-keywords

https://docs.suricata.io/en/suricata-7.0.2/rules/lua-detection.html

https://www.stamus-networks.com/hubfs/Library/Suricata-4-Analysts%20Book/TheSecurityAnalystsGuidetoSuricata.pdf?utm_campaign=Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8T6_cU3XJdK8At8qifUE95jqSOAVcsc3HyPS1y8DI51CaIEjpF533lXBwy5k2EBvg_B8B3

https://docs.suricata.io/en/suricata-6.0.18/rules/rule-lua-scripting.html

https://github.com/OISF/suricata/blob/master/rules/http-events.rules

https://redmine.openinfosecfoundation.org/issues/4067

https://docs.suricata.io/en/suricata-7.0.9/_sources/rules/http-keywords.rst.txt

https://docs.snort.org/rules/options/payload/http/

https://suricatacn.readthedocs.io/zh_CN/latest/rules/rule-lua-scripting.html

https://docs.suricata.io/en/latest/rules/index.html

https://coralogix.com/blog/writing-effective-suricata-rules-for-the-sta/

https://rules.evebox.org/rule/et/open/2059669

https://security.stackexchange.com/questions/256448/suricata-http-rule-to-identify-post-requests

https://stackoverflow.com/questions/54015580/snort-rule-http-body-content

https://forum.netgate.com/topic/151682/lots-of-errors-in-suricata-log

https://forum.suricata.io/t/how-to-record-http-access-response-body-in-suricata-6-0-3/1921

https://oisf-users.openinfosecfoundation.narkive.com/wGJGpfsA/suricata-1-4-http-keywords-in-rule-options-how-does-matching-occur-for-http-header

https://forum.netgate.com/topic/107826/suricata-really-annoying-blocking-everything

https://gerrit.opnfv.org/gerrit/gitweb?p=onosfw.git%3Bhb=823d93b9ed58bdf1e464f7145564b2368f4f758d%3Bf=framework%2Fsrc%2Fsuricata%2Frules%2Fhttp-events.rules

https://security.stackexchange.com/questions/205727/custom-suricatas-http-alert-isnt-triggered-when-using-as-part-of-the-scan

https://docs.suricata.io/en/suricata-6.0.16/rules/

https://community.emergingthreats.net/t/boost-beast-check-in-and-response/288

https://docs.aws.amazon.com/network-firewall/latest/developerguide/suricata-examples.html

https://elhacker.info/Cursos/Suricata%20for%20Incident%20Response%20and%20Threat%20Hunting/PDF/Suricata%20for%20Incident%20Response%20and%20Threat%20Hunting%20manual.pdf

https://techdocs.broadcom.com/us/en/vmware-security-load-balancing/vdefend/vdefend-atp/9-0/nsx-ids-ips-and-nsx-malware-prevention/manage-signatures/enhanced-threat-management-with-custom-signatures/upload-and-publish-a-custom-signature-bundle.html

https://github.com/OISF/suricata/blob/master/doc/userguide/rules/differences-from-snort.rst

https://medium.com/%40egycondor/security-automation-series-part-3-suricata-101-basics-1ab5d4193660

https://docs.suricata.io/en/suricata-7.0.5/rules/

https://b4y.dev/posts/ids-suricata-rules/

https://www.stamus-networks.com/blog/threat-hunting-suricata-open-nrd-part-2

https://cyber.wtf/2024/12/06/detection-of-c2-using-suricata/

https://media.readthedocs.org/pdf/suricata/latest/suricata.pdf

https://raw.githubusercontent.com/OISF/suricata/master/doc/userguide/rules/intro.rst

https://gitcin.cin.ufpe.br/damorim/iot-flows/-/blob/master/experiment/suricata-3.1/rules/http-events.rules

https://insanecyber.com/writing-suricata-rules-understanding-the-basic-rule-format/

https://docs.snort.org/rules/options/payload/http/uri

https://www.youtube.com/watch?v=tvoqFBVSShA

https://www.digitalocean.com/community/tutorials/how-to-configure-suricata-as-an-intrusion-prevention-system-ips-on-debian-11

https://scadahacker.com/library/Documents/Manuals/Suricata%20-%20Suricata.yaml%20Reference.pdf

https://forum.suricata.io/t/suricata-6-0-4-http-uri-normalization/2181

https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-http_endpoint.html

https://inliniac.net/blog/2012/09/21/suricata-luajit-update/

https://www.scribd.com/document/373670678/suricata

https://parsiya.net/blog/sans-holiday-hack-2022/

https://www.dsn.kastel.kit.edu/downloads/Kreibich%20-%20bro-vs-suricata.pdf

https://www.osgeo.cn/suricata/rules/http-keywords.html

https://medium.com/%40nikhil-c/suricata-creating-rules-with-practical-scenarios-df659e87d515

https://docs.nvidia.com/doca/archive/doca-v2.0.2/pdf/dpi-compiler.pdf

https://www.cnblogs.com/linagcheng/p/12559922.html

https://www.abuseipdb.com/suricata

https://www.reddit.com/r/PFSENSE/comments/tzwmcn/help_suricata_shuts_down_after_several_minutes/

https://rules.evebox.org/rule/ptrules/open/10008546

https://nsrc.org/workshops/2015/pacnog17-ws/raw-attachment/wiki/Track2Agenda/ex-suricata-config-test.htm

https://u1timate.cc/archives/suricata-luajian-ce

https://old.zeek.org/brocon2016/slides/purzynski_suricata.pdf

https://media.readthedocs.org/pdf/suricata/suricata-3.2/suricata.pdf

https://www.tcpwave.com/WHITE-PAPERS/Suricata-for-Web.html

https://suricon.net/wp-content/uploads/2019/01/SuriCon2018_Wakelin.pdf

https://academy-training-wiki-media.storage.googleapis.com/_media/ids-20210428-online/suricata-ids-tutorial.pdf

https://forum.suricata.io/t/suricata-rule-not-detect/1586

https://www.scribd.com/document/447802106/suricata

https://stackoverflow.com/questions/76731490/suricata-inline-mode-netfilterqueue-problem-with-droping-by-http-host

https://www.youtube.com/watch?v=KQO5KNDi994

https://www.cnblogs.com/luxiaojun/p/8796069.html

http://tools.cmdhack.com/suricata.pdf

https://docs.nvidia.com/doca/archive/doca-v1.1/pdf/dpi-compiler.pdf

https://fossies.org/linux/suricata/doc/userguide/userguide.pdf

https://www.youtube.com/watch?v=ycGoQgx6VhA

https://forum.suricata.io/t/in-the-case-of-http-keep-live-the-response-information-is-wrong/4777

https://community.emergingthreats.net/t/translating-suricata-http-header-names-content-to-snort/806

https://forum.suricata.io/t/get-url-from-http-packet/3113

https://forum.suricata.io/t/how-to-match-combination-rules-in-suricata/4999

https://www.youtube.com/watch?v=8h_r7brfc3E

https://search.proquest.com/openview/297423555d6d089c1c89a42822e2182d/1?pq-origsite=gscholar&cbl=18750&diss=y

https://forum.suricata.io/t/http-rule-does-not-detect-http-uri-after-a-certain-time/4373

https://forum.suricata.io/t/how-to-record-http-body-data/2374

https://www.coursesidekick.com/information-systems/2254576

https://forum.suricata.io/t/detection-rule-for-simple-post-request/1783

https://forum.suricata.io/t/suricata-http-event-and-alert-event-output-seem-not-correct/3940

https://docs.suricata.io/en/latest/rules/intro.html

https://forum.suricata.io/t/rule-using-http-does-not-matching-get-request/2121

https://forum.suricata.io/t/suricata-parse-http-error-lots-of-libhtp-request-uri-not-seen-and-http-request-info-lose/3765

https://forum.suricata.io/t/http-traffic-partially-dropped/2107

https://forum.suricata.io/t/some-match-bypass/1536

https://forum.suricata.io/t/questions-about-suricata-rules-directions/2078

https://forum.suricata.io/t/suricata-sending-request-response-bodies-in-multiple-events-due-to-alert-rule/4455

https://forum.suricata.io/t/how-to-create-a-dataset-using-http-host-and-http-uri/3219

https://forum.suricata.io/t/suricata-http-request-response-data-is-not-outputting-to-eve-log-is-there-any-way/4793