Removing icons from EmergingThreats rules

1

Good morning,

Is there any way to delete/remove/eliminate the icons that appear in EmergingThreats signatures with suricata-update? They are frankly annoying and cause multiple problems with event management tools.

Many thanks.

2

I haven’t see them in ET, only in the pawpatrules. In any case Suricata can’t filter them out for you. Perhaps it can be done with a suricata-update modify rule?

3

Uhmm … I am using only ET-Open rules … no pawpatrules

4

Oh. Could you give an example of such icons, in that case, then?

5

Or even better, the rule(s) itself.