diff --git a/suricata.rules b/suricata.rules index f0f587e..912b401 100644 --- a/suricata.rules +++ b/suricata.rules @@ -1 +1,3 @@ -alert dns any any -> any any (msg:"Request to google.com"; content:"google.com";) \ No newline at end of file +alert dns any any -> any any (msg:"Request to google.com"; content:"google.com";) + +alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"KOEN INFO Outgoing Plaintext HTTP Request"; flow:established,from_client; sid:1; rev:1;) \ No newline at end of file