how to customize the mltk model predefined in escu rules

[lily]

Hi, I am lily.

I want to know how to customize the MLTK model using in ESCU rules.

If it doesn't, it is possible to check the contents of models inside the MLTK?  

<example>
I want to know how 'count_by_http_method_by_src_1d' was made

[Ismail_BSA]

I am also interested by this question