When installing ModSecurity from the default Debian/Ubuntu repository, themodsecurity-crspackage is also installed as a dependency. This package contains the OWASP core rule set version 3.x. However, it can become out of date. If you care about security, you should use the latest version of c...