Suricata intrusion audit

Boosting Suricata With Next-Gen Deep Packet Inspection

Intrusion detection/intrusion prevention systems (IDS/IPS) play an essential role in cybersecurity by detecting and blocking threats that have penetrated endpoint and perimeter defenses. Open source Suricata is one of the most widely ...
Security Boulevard
How to Track Agent-Based User Activity

How to Track Agent-Based User Activity

More often than not we’ll need to go beyond a Severity 1 alert to figure out what a user (including a potentially malicious attacker) was doing on a system. Host events in ...