The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Importing snort custom attacks

Prev Next

Using the Custom Attack Editor, you can import Snort rules from a file against constructing them one by one. Sources such as the Snort user community distribute files containing the rules which you can directly import. The import feature is helpful when you want to create a large number of Snort Custom Attacks in one go.

You can use files to import Snort rules into the Manager following any one of the two methods described below:

  • Import a .zip file that contains all the required files.

  • Import files individually in a specific order.

If you are importing the files individually, they have to be imported in the following order:

  1. Import the Snort Configuration file (.conf)

  2. Import the Snort variable files

  3. Import the Snort rules files (.rules)