# Updating MISP for generation of better Suricata rules

**URL:** <https://discourse.ossbase.org/t/updating-misp-for-generation-of-better-suricata-rules/56>\
**Category:** hackathon.lu\
**Tags:** hackathon-2025\
**Created:** [April 8, 2025, 2:28pm UTC](https://discourse.ossbase.org/t/updating-misp-for-generation-of-better-suricata-rules/56 "2025-04-08T14:28:52Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![regit](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/regit/32/56_2.png) [@regit](https://discourse.ossbase.org/u/regit)\
**Post date:** [April 8, 2025, 2:28pm UTC](https://discourse.ossbase.org/t/updating-misp-for-generation-of-better-suricata-rules/56/1 "2025-04-08T14:28:52Z")

</div>

Suricata rules language contains some features that can be used to improve the events generated when a signature written by MISP is triggering. The objective of the task is to improve the automated generation:

- more context in the alert events
- support of more attributes types