inliniac/suricata — pull request #814 by CyberDaedalus00 (2014-02-03 21:21:11+00:00)
Title: Initial STIX-based indicator integration

This pull request is for the initial integration of support for STIX-based indicators per ticket 1095 (https://redmine.openinfosecfoundation.org/issues/1095). The request includes update to some existing Suricata files to incorporate support for receiving STIX-based indicators as JSON messages through the unix socket interface, dispatching the message to the appropriate handlers, and the enforcing the indicator at runtime. Details about the build and test for this support is contained in the README-stix.txt file contained in the root directory.