Writing Snort 3 Rules

Focused View

Matt Glass

1:24:02

54 View

Exercise Files

writing-snort-rules.zip

Module 1 - Course Overview

1. Course Overview.mp4

01:02

Module 2 - Writing Your First Snort Rule

1. Overview.mp4

02:39

2. Demo - Lab Setup.mp4

05:33

3. Why Would I Write Custom Rules.mp4

03:48

4. Writing a Basic Snort Rule.mp4

04:28

5. Demo - Writing Basic Rules.mp4

07:17

6. Summary.mp4

00:51

Module 3 - Creating Custom Rules with Rule Options

1. Overview.mp4

01:14

2. Payload Detection with Content.mp4

02:37

3. Demo - Payload Detection with Content.mp4

06:43

4. Non-Payload Detection Options.mp4

03:19

5. Demo - Non-Payload Detection Options.mp4

05:28

6. Demo - Non-Payload Detection Options (Continued).mp4

02:54

7. Post-Detection Rule Options.mp4

02:25

8. Demo - Post-Detection Rule Options.mp4

03:58

9. Summary.mp4

01:23

Module 4 - Optimizing Rules with New Features

1. Overview.mp4

01:31

2. Leveraging Version 3 Features.mp4

02:38

3. Demo - Leveraging Version 3 Features.mp4

04:50

4. Snort File Processing.mp4

02:05

5. Demo - Detecting Files by Type.mp4

03:58

6. Demo - Detecting Files by Type (Continued).mp4

04:59

7. Demo - Creating a File Blacklist.mp4

03:42

8. Wrapping Up.mp4

04:40

Description

Snort is an open source network intrusion detection system and intrusion prevention system. This course will teach you how to write your own custom rules in Snort to detect specific traffic.

What You'll Learn?

Would you like to detect potential threats to your network? Snort is an open source network intrusion detection system and intrusion prevention system that includes the ability to write custom rules. In this course, Writing Snort Rules, you’ll learn to write your own custom rules for Snort to detect specific traffic. First, you’ll explore the basic Snort rule structure. Next, you’ll discover how to leverage additional options to refine your traffic detection. Finally, you’ll learn how to further optimize your rules with new options in Snort version 3. When you’re finished with this course, you’ll have the skills and knowledge of Snort needed to write your own rules.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Ethical Hacking

Penetration Testing

Network Security

Matt Glass

Instructor's Courses

Matt Glass is a Regional Field Service Support Lead in Yokosuka, Japan, working as a government contractor. Matt has more than 13 years of IT experience in a variety of roles. Consistently finding joy in developing the skills of others and helping their careers, he joined Pluralsight in 2017 to pass on the lessons he learned. Matt is married and the father of four children.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.