Manage Suricata 6 Rule Sets and Rule Sources

Focused View

Matt Glass

1:06:58

92 View

Exercise Files

manage-suricata-rule-sets-rule-sources.zip

Module 1 - Course Overview

1. Course Overview.mp4

01:41

Module 2 - Understanding Suricata Rule Sets and Sources

1. Overview.mp4

01:46

2. Demo - Lab Setup.mp4

04:00

3. Suricata Rule Sets and Sources.mp4

02:34

4. Open Source Rule Sets.mp4

01:31

5. Demo - Exploring the Emerging Threats Rule Set.mp4

03:18

6. Summary.mp4

01:19

Module 3 - Leveraging Suricata Update

1. Overview.mp4

01:38

2. Managing Sources with Suricata Update.mp4

03:41

3. Demo - Selecting Appropriate Rule Sources.mp4

03:13

4. Demo - Enable Rule Sources.mp4

03:13

5. Demo - Add Custom Rule Sources.mp4

01:48

6. Managing Rules with Suricata Update.mp4

01:48

7. Demo - Enabling and Disabling Rules.mp4

04:33

8. Demo - Modifying Rule Behavior.mp4

02:36

9. Summary.mp4

01:03

Module 4 - Examining Rule Set Effects

1. Overview.mp4

01:14

2. Detecting Specific Threats.mp4

01:56

3. Using PCAP Capture and Replay.mp4

01:42

4. Demo - Capturing Traffic to PCAP.mp4

06:40

5. Demo - Evaluating Rule Set Effects.mp4

03:53

6. Summary.mp4

01:15

Module 5 - Managing Suricata Rule Sets with Cron

1. Overview.mp4

00:59

2. Cron Overview.mp4

01:46

3. Demo - Scheduling Updates with Cron.mp4

04:51

4. Wrapping Up.mp4

03:00

Description

This course will teach you how to manage Suricata rule sets and rule sources to optimize your configuration and detection.

What You'll Learn?

Intrusion detection and prevention are an important part of any enterprise network security monitoring plan. In this course, Manage Suricata 6 Rule Sets and Rule Sources, you’ll learn to select and obtain pre-written rules. First, you’ll explore open-source rule sets. Next, you’ll discover how to leverage suricata-update to add rule sources. Finally, you’ll learn how to manage regular updates with cron. When you’re finished with this course, you’ll have the skills and knowledge of Suricata needed to manage Suricata’s rule sets and rule sources using suricata-update.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Network Security

Matt Glass

Instructor's Courses

Matt Glass is a Regional Field Service Support Lead in Yokosuka, Japan, working as a government contractor. Matt has more than 13 years of IT experience in a variety of roles. Consistently finding joy in developing the skills of others and helping their careers, he joined Pluralsight in 2017 to pass on the lessons he learned. Matt is married and the father of four children.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.