Intrusion Detection with Snort – Blue Team Series with Hackersploit
In the second episode of our Blue Team series @HackerSploit introduces intrusion detection with Snort, the foremost Open Source Intrusion Prevention System (IPS) in the world.
Chapters:
0:00 Introduction
0:44 What We’ll Be Covering
1:32 Prerequisites
2:02 What Are Intrusion Detection Systems?
5:13 Introduction to Snort
9:26 What are the Different Versions of Snort?
12:16 What are Snort Rules?
13:27 Snort Rule Syntax
15:20 How Does Snort Work?
16:21 Snort IDS Network Placement
19:16 About Our Lab Environment
20:49 On to the Practical Demo
22:01 Installing Snort
26:56 How to Enable Promiscuous Mode
27:43 How to Examine the Manual for Snort
28:10 Snort Configuration
36:04 Testing Our Configuration File
40:39 Creating Basic Rules
46:30 How to Run Snort
49:38 Writing Another Rule
51:10 Verifying Our New Rule
53:04 How to Use Snorpy
56:25 Let’s Examine Community Rules
1:05:37 How to use Logging in Snort
1:10:19 Conclusion
New to Linode? Get started here with a $100 credit!
Read the doc for more information on network security tools.
Check out Hackersploit’s Red Team Series.
Subscribe to get notified of new episodes as they come out.
#Linode #BlueTeam #Hackersploit #Snort
Product: Linode, Snort, Blue Team; @HackerSploit ;
You might also like…
-
Incident Response with FireEye | Final Hackersploit Blue Team Training
In this video, @HackerSploit covers using FireEye's Redline for incident response, which lets users find signs of malicious activity. -
Windows Red Team Credential Access Techniques | Red Team Series 6-12
In this part of the HackerSploit Red Team series, we explore credential access techniques for stealing credentials, like users and passwords. -
All-In-One Open Source Security Scanner Docker Image Analysis with Trivy
Trivy is used by cybersecurity experts to find vulnerabilities & IaC misconfigurations, SBOM discovery and more. -
Intrusion Detection with Suricata – Blue Team Series with Hackersploit
In this video, we'll cover the process of installing, configuring, and using Suricata for intrusion detection.