Threat intel reports a new exploit kit targeting services the county still runs at the edge. What IDS/IPS maintenance actions best keep detections current and useful?
Select an answer to reveal the explanation.
Short Explanation
When a new exploit kit shows up, refresh the IDS/IPS signatures and peek at the trend lines—are you catching it, or drowning in junk? Freezing signatures or flipping to allow-all is how you miss the wave.
Full Explanation
IDS/IPS effectiveness depends on current signatures or detection content plus ongoing review of alert trends to tune for both coverage and false positives. After new exploit kits appear, municipal defenders update signatures and analyze trends to confirm detection quality. Freezing content, discarding history, or disabling prevention reduces visibility and protection.