Snort 2 - Introduction to Rule Writing
This video covers how to get started writing rules for the Snort 2.x open source IPS. This how-to video requires that you have a working Snort 2 installation. Watch the video on installing and configuring Snort 2 first. Learn how Snort rule syntax, structure, and operators combine to detect and alert on security events.
For a primer on RegEx, visit https://regex101.com