Given the regular expression /[^Cc]at/, where does the system look for the "C" or "c"?
Given the rule option byte_jump:4,4,relative, align;, how many bytes are being jumped?
Given the rule option byte_test:1, ,64,2;, what is the offset?
Which rule keyword categorizes alerts into attack classes?
Which keyword can you use to try to close a session when an alert is triggered?