Enabling suricata provided ssh-events.rules

Rules
,
1

Hello,

I am using suricata version 7.0.3.

When I run suricata-update, I did not see suricata provided /usr/share/suricata/rules/ssh-events.rules being loaded.
Upon searching I found that the files that are loaded are hardcoded in /usr/lib/suricata/python/suricata/update/main.py.

If I want to load ssh-events.rules as well, what is recommended? Should I change /usr/lib/suricata/python/suricata/update/main.py or copy the file ssh-events.rules to /var/lib/suricata/rules?

Thanks in advance,
-Neel.

2

Those are static rules that you should rather directly copy and embed as dedicated rule files in the suricata config instead of managing it via suricata-update