On 12/7/2017 4:20 PM, John Hardin wrote:
I was more thinking about coverage for people who aren't using KAM.cf, but your comment about needing enough examples in the masscheck corpus to promote and score the rule is relevant - perhaps it is important enough to add as a base header rule, rather than through ruleqa sandboxes?
I'm guess I don't really know how. What is your definition of a base header rule and what mechanism would you use to publish it as a base rule? We effectively build rules as a measure to get an initial install but ruleqa driven sa-updates are our mechanism for publishing.
Regards, KAM