Hi

Firstly, thanks to Morpheus for the quite flawless instructions for installing Snort on Windows and the various additional tutorials.

Just a quick question about Pulled Pork.  I have installed it and everything is working just fine.  I'm just not clear how often the rules and sigs get updated and what the update mechanism is.  Can anyone elaborate?

thanks!

Sorry for the delay. There is no event mechanism setup for auto-updating the rules using Pulledpork. This has to be completed manually unless you create something to auto-update.

Remember: there needs to be faults checked throughout the complete update process because if one error occurs the Windows Intrusion Detection will shut down without notice.

A script would need to very detailed and faults would need to be handled properly.