I want to use IDS or IPS system like Snort or Suricata for the purpose of scanning files which are send by HTTP (or different way). Let's assume that files are not encrypted by the way.Any rule or example of configuration will be appreciated. Thanks and have a nice day.
Scanning files over http by suricata or snort
http;scanner;snort;ips