Writing Snort 3 Rules
|
Snort is an open source network intrusion detection system and intrusion prevention system. This course will teach you how to write your own custom rules in Snort to detect specific traffic.
Would you like to detect potential threats to your network? Snort is an open source network intrusion detection system and intrusion prevention system that includes the ability to write custom rules. In this course, Writing Snort Rules, you’ll learn to write your own custom rules for Snort to detect specific traffic. First, you’ll explore the basic Snort rule structure. Next, you’ll discover how to leverage additional options to refine your traffic detection. Finally, you’ll learn how to further optimize your rules with new options in Snort version 3. When you’re finished with this course, you’ll have the skills and knowledge of Snort needed to write your own rules.
Author Name: Matt Glass
Author Description:
Matt Glass is a Service Delivery Manager in Naples, Italy, working as a government contractor. Matt has 15 years of IT experience in a variety of roles. Consistently finding joy in developing the skills of others and helping their careers, he joined Pluralsight in 2017 to pass on the lessons he learned. Matt is married and the father of four children.
Table of Contents
- Course Overview
1min - Writing Your First Snort Rule
24mins - Creating Custom Rules with Rule Options
30mins - Optimizing Rules with New Features
28mins
User Reviews
Be the first to review “Writing Snort 3 Rules”
Related Products
Active Defense with PowerShell
Attackers are constantly trying to get on your system, in your networks, and around your data. This course will teach you a few functions and scripts that can be utilized to proactively defend a system on a network.
Scripting for Security with Bash
Bash is the GNU Project’s shell for command execution, scripting, and automation. This course will teach you how to use Bash and Linux commands for security management.
Sniffing and Spoofing with Kali Linux
Having access to an internal network can provide a wealth of information, if you know how to look for it. This course will teach you Sniffing and Spoofing techniques using Ettercap and TCPDump.
Application Analysis with Snyk
Developer-centric security is the need of the hour. In this course, you will learn how to automatically detect and fix vulnerabilities in your code, open source dependencies, containers, and infrastructure-as-code with Snyk.
Social Engineering: Executive Briefing
Social engineering poses a potential threat to not only employees at an organization, but also directly to company executives. In this executive briefing, we will look at understand what social engineering and how you can protect yourself from it.
Defense Evasion with Meterpreter
Learning Defense Evasion is a prerequisite for using Metasploit tooling successfully in a secure environment. This course will teach you how to stay under the radar and evade detection even in highly secure environments.
There are no reviews yet.