As you have done within other classes to build Snort rules, you will now take the information you gathered to create Snort rules. Use the details you collected within this lab to create three Snort rules to detect the activity. In Q8, can you create specific snort rules (at least 3 rules) to monitor traffics ?

For example,

alert tcp any any -> 10.0.250.160 80 (msg: "Malicious Payload Upload"; sid:1000002; content:"FileUploader"; http_uri; content:"POST"; http_method; flow:to_server,established;)

Can anyone create me 3 basic snort rules using that IP address?