Intrusion Detection with Suricata | Blue Team Series with Hackersploit

[@fabiogiroux6347]

I use Suricata for Windows servers, but it uses a lot of memory and disk space on my servers. When I try to configure it based on the documentation, the adjustments don't work. I'm thinking about replacing it with snort, what do you say?

[@daaark9298]

Hey , i m working on an ids using suricata with filebeat and elk , i have 2 vms , 1st with elk / kibana and 2nd with suricata and filebeat , i wanna add wazuh to this config , would it be possible ?

[@abhinav79]

How to save the changes for things we done in configuration and to find the text??

[@AkamaiDeveloper]

If you're following the instructions in this video and using Vim, you can save the changes made to the configuration file by pressing "Esc" to exit "Insert" mode then ":w" to write your changes. To search the file for specific text, you will use "/$word" then press the "return" or "enter" key. The example in the video is "/af-packet" If you're unfamiliar with Vim, we suggest checking out these videos: - kzbin.info/www/bejne/mIOYk42onsaCjLcsi=c2RKmH81QW0NXD9P - kzbin.info/www/bejne/sHaTmaGlaNuJb68si=C8CE35M1BPPgMSry

[@th3-s3c3m4n]

can you share the presentation file plz ?

[@anshumanaaditya944]

Suricate logs on wazuh dashboard is not looking convincing and more confusing.

[@johnvardy9559]

suricata or snort?

[@jacogomez1093]

i'm team suricata

[@radhakumari-iy4st]

Sz@zk

[@calvinnguyen1699]

how can the suricata work the sam snort sudo snort -A console -q -u snort -g snort -c /etc/snort/snort.conf -i wlp0s20f3