Security onion training | EP4 | How to use snort IDS and Sguil

[@noahchesterman8538]

good quality content. one thing i would call out. if you are working for a software development company, don't upload a file to virus total, generate a hash, and search for the hash on virus total. the reason is, virus total will share the file (which could be a product your company created,) with third parties. uploading the file will allow these third parties to potentially see the code your company is developing.

[@ravibhavsar42]

many thanks Motasem Hamdan, i am learning cyberOps and your tutorial helped understanding Sguil.

[@ceynine5873]

Thanks

[@babitarimal7693]

I need some help. Wireshark and network miner donot work.

[@danielsalazarfalfan2358]

hi! . I'm trying to install sguild, with snort and barnyard. I have not found any manual clear enough to install Sguil. They will have some link or information that can help me, I would greatly appreciate it

[@ajitmathew82]

I can see that you have added the IPS on every segment. So is the IPS in bridged mode or inline mode. Looks like it is in bridged mode.

[@DLANM57]

Fantastic...Thanks!

[@ITHunt-]

Good brother

[@johnniej9350]

i need help installing snort on my security onion

[@taimooofr27]

great.. thnx

[@MotasemHamdan]

thanks for your comment

[@Upriva]

Did anyone have issue with logging to Sguil or Kibana. My main password works fine, but cant log in to Sguil, says invalid pass. Any advice?

[@dennissalabao8216]

stop moving the mouse make me crazy

[@jondonnelly3]

mic is terrible.

[@HK-sw3vi]

i need help snorting coke