Use this method only if you are an advanced user. It offers the flexibility to select the operations that the signature is protecting, including changing, adding, and deleting operations. You can create an entirely new signature, one based on an existing custom signature, or one based on a duplicate of an existing custom signature.
To create a signature with the standard mode:
To use Standard Method: |
To use Expert Method: |
---|---|
The Standard Method limits the number of types you can include in the signature rule.
|
The Expert Method, recommended only for advanced users, enables you to provide the rule syntax without limiting the number of types you can include in the signature rule. Before writing a rule, make sure you understand rule syntax. Refer to Writing Custom Signatures.
|
|
|