One handy feature that is current missing with the Rules is an action that can add (or overwrite) a comment for any matching session.
The desired result would be something like this:
MalwareInfosec
One handy feature that is current missing with the Rules is an action that can add (or overwrite) a comment for any matching session.
The desired result would be something like this: