[Owasp-modsecurity-core-rule-set] Core Rules Tutorial Published

Christian Folini christian.folini at netnea.com
Wed Nov 2 06:27:37 UTC 2016


Dear all,

There has been extensive feedback to the draft version of my 
Core Rules 3.0 tutorial (special thanks to Walter Hop).

So here is the finalised version:
https://www.netnea.com/cms/apache-tutorial-7_including-modsecurity-core-rules/

This is written for OWASP ModSecurity Core Rule Set 3.0.0-rc2.
RC3 should be out anytime now. I will update accordingly and when
the full version comes out (scheduled for November 8), then
I'll update again. The differences between rc2 and rc3 and final
are minimal. You can try this out immediately without worrying about
rules upgrades, etc.

Cheers,

Christian

P.S. There is a Rules Exclusion cheatsheet included in the tutorial.
You should check this out.

-- 
https://www.feistyduck.com/training/modsecurity-training-course
mailto:christian.folini at netnea.com
twitter: @ChrFolini


More information about the Owasp-modsecurity-core-rule-set mailing list