spp_http_decode rules

[Ken Mencher <kenm () Buy com>]

I've got two of these category rules: CGI Null Byte attack & IIS Unicode
attack as two of my most frequent "attacks".  From what I've been able to
determine, they're all totally bogus...but I can't find the .rules file
where they exist...
 
How do I disable those?
 
Ken Mencher
Network/Security Admin
buy.com
949-389-2123 

Cahn's Axiom: When all else fails, read the instructions.