The ET Team’s Rules Severities wiki article has been helpful for me to work out which rules I can turn off in my environment, but I noticed today that about 1000 signatures for Tor nodes use the “Audit” severity. I haven’t seen any other kinds of signatures with that severity, but for the sake of completeness, can you include the meaning of “Audit” in that article? Thanks!
Hi @samjenk, we’ve just recently made this change. Those rules are now severity informational. Thanks for your feedback!
Thanks, Rich! I appreciate how responsive you all are to feedback.