I want develop a machine learning plugin for suricata that give data from streaming and decoding engine, analysis data and attach result to the suricata output engine. But I can’t find any document for explain engines and work with them. Can you guide or send me a document to do this?
I have attached the model to this message.
I saw the link below explained the pcap output should be used:
Can I then add the result to the output?
and in the below link explained the api will develop on suricata 7: