Recently migrated from snort 2 to snort 3 and looking for best practice to maintain and review IPS policy. For example, in new snort 3 policy I no longer have the POLICY LAYER where I would go to view any NEW or MODIFIED rules from previous update. How does one maintain snort 3 rules now? Looking for simple quick how-to (not entire book), what you do on weekly basis to maintain and validate new updated policies and changes.
Thanks!