Network Sensor IDS Signature Definition

[antmar904]

Is there any documentation on the IDS signatures that the R7 network sensors produce?

[darragh_delaney2 (Darragh Delaney)]

Hi @antmar904
We just have this resource which focuses on extra detections you get with enhanced network traffic analysis

| InsightIDR Documentation

The IDS component of the sensor mainly focuses on network based Malware detection. ET-Malware is the primary rule category which is available to all sensors. We supplement that with detections which look at TLS and DNS metadata.

Darragh