This chapter describes the proper method of writing pattern-matching signatures using the Regular Expression Language supported for Trellix IPS Custom Attacks.
Note
Signature creation requires a working knowledge of protocols and the data they carry across your network, as well as an ability to write a proper signature using a regular expression language. This information is intended for advanced network security personnel who have experience with Trellix IPS Custom Attack creation.
Signature creation is based on a set of expressions in a defined syntax, also known as regular expressions.