I've run a small update of 90_axb_fraud.cf https://sourceforge.net/projects/sare/
As nobody except John Hardin has shown up to contribute data, this is the last update I'll release as it requires massive fresh data to make the work worthwhile.
enjoy... -- Do not use SARE rules - use sa-update
