PT Rules

2024: PT Rules Project Launch

Positive Technologies The PT Expert Security Center team has a separate team of specialists who develop detection rules cyber attacks for network security tools. The company announced this on October 17, 2024. Based on this examination, the PT Rules project was launched with. open source Its task is to share Positive Technologies signatures for Suricata with the information security community and help identify the activity of attackers in time. The project portal contains a set of Suricata rules, which will be constantly updated.

Positive Technologies actively shares information security expertise with the world community using different formats. Thus, the company regularly publishes cybersecurity research, takes an active part in foreign industry conferences and organizes its own events. PT Rules is another format for sharing experiences with the global information security community, so the project is in English.

{{quote 'We believe in the strength of the international information security community, which develops projects with open source code and joint efforts makes the digital world safer. We have the same goal, so we have created our own platform where we will share tools to protect against the latest cyber threats, "said Kirill Shipulin, head of the attack detection group in the PT NAD product network of the Positive Technologies security expert center. - We invite our colleagues around the world to join PT Rules to use up-to-date expertise and complete it with useful findings. By uniting, we will be able to quickly identify and eliminate threats that could cause unacceptable damage to society, corporations and. to the states }}

Recently, the PT Expert Security Center team posted rules on the PT Rules portal to detect vulnerabilities and tools popular among cybercriminals, as well as signatures to detect movement inside the perimeter in the Active Directory directory service. To update the rules in a timely manner, experts recommend using the suricata-update utility to include the ptrules/open repository, which is included in the list of officially supported signature repositories.