Since we are working with the HTTP requests, we can always use the Burp repeater to aid quick testing. So, let's work with Snort and Burp side by side and begin some testing:
We can see that as soon as we sent out a request to the target URI, it got logged to Snort, which is not good news. Nevertheless, we saw the rule, and we know that Snort tries to match the contents of GET to the one in the request. Let's try modifying the case of the GET request and repeat the request as follows:
No new logs have been ...
