Suricata Reviews and details

Social recommendations and mentions

• Who does check linux distros of malware - open source

  Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata... Source: 5 months ago

• Risks of hosting a website out of my house

  Monitoring & Active Measures - Exporting firewall events to an external time-series database like I describe above is good to see who is touching your firewall or accessing your web site. Using an Intrusion Detection System / Intrusion Prevention System (IDS/IPS) such as open-source Suricata, which is a free package on pfSense, and deploying file system integrity monitoring, such as the open-source Wazuh on the... Source: 6 months ago

• Server Hardening

  Active Measures - Includes (IDS/IPS) such as open-source Suricata or Snort on pfSense, and File Integrity Monitoring (FIM), such as the commercial Tripwire and dated, open-source Tripwire, or the open-source Wazuh installed on servers. These can be combined into a Security Information and Event Management (SIEM) system like the open-source solution, Security Onion. Wazuh itself has evolved into a SIEM. Source: over 1 year ago

• Help with server build

  Active measures may include an intrusion detection system / intrusion prevention systems (IDS/IPS) such as open-source Suricata on the firewall, and installing file system integrity monitoring, such as the open-source Wazuh on the exposed server. These are combined in one open-source solution, Security Onion. Source: over 1 year ago

• Would love a guide to Unifi Threat Management similar to your "Advanced Wifi Settings" Guide

  Thanks! Was there something in particular you were wondering about? The built-in IDS/IPS is just Suricata under the hood - https://suricata.io/. Source: over 1 year ago

• I think my neighbor is jamming my Wi-Fi w radio interference to help my abusive x rob my house. Shuts off the ring devices and alarms. I’m scared to death. He flattened tires and cut the fence so my dogs w get out. And I find a gps in my van. I even had weird radio stuff on my radio one day.

  Using a spare laptop and two WiFi dongles (one for 2.4GHz, one for 5GHz) and use an application called Kismet to Monitor the WiFi channels. This is then backed into Suricata IDPS with some custom rules. Source: almost 2 years ago

• Home server setup

  Active measures may include an intrusion detection system / intrusion prevention systems (IDS/IPS) such as open-source Suricata on the firewall, and installing file system integrity monitoring, such as the open-source Wazuh on the exposed server. These are combined in one open-source solution, Security Onion. Source: over 2 years ago

• Zinc - A lightweight alternative to elasticsearch in Go

  I'm really enjoying playing with Zinc. We've been playing with it in house here with Meer (https://github.com/quadrantsec/meer) and ingesting several gigs of Suricata (https://suricata.io) and Sagan (https://github.com/quadrantsec/sagan) logs. Source: over 2 years ago

• Is it possible to use a linux device as a network-wide antivirus (scans network traffic and stops/cleans virus on the fly)? If so, how can I do this?

  Maybe suricata is what you're looking for: https://suricata.io/. Source: over 2 years ago

• I GOT AN OFFER AS A SECURITY ANALYST BEFORE I CAN EVEN GET SECURITY+ CERTIFIED

  Never heard of Wazuh and Suricata Suricata until today. I'm gonna have to play with those things when I get a chance. Source: over 2 years ago

• Intrusion detection software?

  WAZUH (fork of OSSEC would be my first choice when it comes to Linux based HIDS (host based), and Snort or Suricata if you are looking for NIDS (network based). As well as Lynis for ensuring the setup of the host is as you intended. Source: over 2 years ago

• Intrusion detection software?

  You may take a look at this: https://suricata.io/. Source: over 2 years ago