suricata/etc/reference.config

# config reference: system URL

#
# Note: https// used
##############################
# Referenced by ET/Open ET/Pro
##############################

#  resolves, works as intended
config reference: cve       https://cve.mitre.org/cgi-bin/cvename.cgi?name=
config reference: nessus    https://www.tenable.com/plugins/nessus/
config reference: url       https://

#whitehats is unfortunately gone
#
#  no longer resolves
config reference: McAfee    https://vil.nai.com/vil/content/v_
config reference: bid	    https://www.securityfocus.com/bid/
config reference: bugtraq   https://www.securityfocus.com/bid/
config reference: md5	    https://www.threatexpert.com/report.aspx?md5=

#  resolves, but non-useful page
config reference: secunia   https://www.secunia.com/advisories/
config reference: arachNIDS https://www.whitehats.com/info/IDS

###################################################
# No longer referenced from ET/Open ET/Pro rulesets
###################################################

#  resolves
config reference: exploitdb https://www.exploit-db.com/exploits/
config reference: msft      https://technet.microsoft.com/security/bulletin/

#  resolves, but non-useful page
config reference: et        https://doc.emergingthreats.net/
config reference: etpro     https://doc.emergingthreatspro.com/
config reference: telus     https://

#  no longer resolves
config reference: xforce    http://xforce.iss.net/xforce/xfdb/
config reference: osvdb     http://osvdb.org/show/osvdb/
config reference: threatexpert http://www.threatexpert.com/report.aspx?md5=
config reference: openpacket https://www.openpacket.org/capture/grab/
config reference: securitytracker http://securitytracker.com/id?
Add the ET reference.config file as a default 14 years ago			`# config reference: system URL`

config: Update reference keys Issue: 4974 1. Use https instead of http everywhere 2. Organize and annotate references by - Referenced by ET/Open and ET/Pro - URL resolves and works as intended (to provide supplemental information regarding a reference value, e.g., bug id, cve value) - URL no longer resolves - URL resolves but doesn't work as intended (to provide supplemental information) - Not referenced by ET/Open nor ET/Pro - URL resolves and works as intended (to provide supplemental information regarding a reference value, e.g., bug id, cve value) - URL no longer resolves - URL resolves but doesn't work as intended (to provide supplemental information) 9 months ago			`#`
			`# Note: https// used`
			`##############################`
			`# Referenced by ET/Open ET/Pro`
			`##############################`

			`# resolves, works as intended`
			`config reference: cve https://cve.mitre.org/cgi-bin/cvename.cgi?name=`
			`config reference: nessus https://www.tenable.com/plugins/nessus/`
			`config reference: url https://`
Add the ET reference.config file as a default 14 years ago
			`#whitehats is unfortunately gone`
config: Update reference keys Issue: 4974 1. Use https instead of http everywhere 2. Organize and annotate references by - Referenced by ET/Open and ET/Pro - URL resolves and works as intended (to provide supplemental information regarding a reference value, e.g., bug id, cve value) - URL no longer resolves - URL resolves but doesn't work as intended (to provide supplemental information) - Not referenced by ET/Open nor ET/Pro - URL resolves and works as intended (to provide supplemental information regarding a reference value, e.g., bug id, cve value) - URL no longer resolves - URL resolves but doesn't work as intended (to provide supplemental information) 9 months ago			`#`
			`# no longer resolves`
			`config reference: McAfee https://vil.nai.com/vil/content/v_`
			`config reference: bid https://www.securityfocus.com/bid/`
			`config reference: bugtraq https://www.securityfocus.com/bid/`
			`config reference: md5 https://www.threatexpert.com/report.aspx?md5=`

			`# resolves, but non-useful page`
			`config reference: secunia https://www.secunia.com/advisories/`
			`config reference: arachNIDS https://www.whitehats.com/info/IDS`

			`###################################################`
			`# No longer referenced from ET/Open ET/Pro rulesets`
			`###################################################`

			`# resolves`
			`config reference: exploitdb https://www.exploit-db.com/exploits/`
			`config reference: msft https://technet.microsoft.com/security/bulletin/`

			`# resolves, but non-useful page`
			`config reference: et https://doc.emergingthreats.net/`
			`config reference: etpro https://doc.emergingthreatspro.com/`
			`config reference: telus https://`

			`# no longer resolves`
			`config reference: xforce http://xforce.iss.net/xforce/xfdb/`
Update reference.config Updated reference.config to match ET Open reference.config found here: https://rules.emergingthreats.net/open/suricata/reference.config Due to startup error shown here: root@xxxxxxx01:/etc/suricata/rules# /usr/bin/suricata -c /etc/suricata/suricata.yaml --pidfile /var/run/suricata.pid --af-packet 23/12/2014 -- 22:07:56 - <Error> - [ERRCODE: SC_ERR_REFERENCE_UNKNOWN(150)] - unknown reference key "osvdb". Supported keys are defined in reference.config file. Please have a look at the conf param "reference-config-file" <...> Killed 10 years ago			`config reference: osvdb http://osvdb.org/show/osvdb/`
			`config reference: threatexpert http://www.threatexpert.com/report.aspx?md5=`
			`config reference: openpacket https://www.openpacket.org/capture/grab/`
			`config reference: securitytracker http://securitytracker.com/id?`