Security Onion Essentials 2.4 - Threat Hunting

In this session, Matt Gracie covers our second of three common workflows in Security Onion - Threat Hunting.
Security Onion Essentials 2.4 - Playlist: • Security Onion Essenti...
If you have questions or problems, please start a new discussion at securityonion.net/discuss

[@habibsellah6849]

Thanks for video !!!

[@security-onion]

You're welcome!

[@habibsellah6849]

Is it true ? Arp attacks related to layer 2 of OSI model. Suricata and Snort IDPS is developed to detect attacks at the higher level of OSI model. Suricata doesn't have mechanism to detect such type attacks.

[@security-onion]

If you have questions or problems, please start a new discussion at securityonion.net/discuss

[@veronicaindimulim.7712]

n it.nice beginning for me..

[@security-onion]

Thanks, glad you like it!