For the #IFIN newcomers, I wanted to drop a mega-thread on a bunch of blog posts and resources I've written in the past few years focused on #ThreatResearch, #VulnerabilityResearch , #DetectionEngineering , getting people comfortable with #Snort and #Suricata, and #Homelab and just dump them into one place, with the promise to update them, if you all want it. Go have a look here:

https://discourse.ifin.network/t/nsm-and-virtual-labbing-mega-thread/319

NSM and Virtual Labbing Mega-Thread

NSM and Virtual Labbing Mega-Thread In talking to some of the seniors in charge around here, I asked about sharing some old blog posts I did for my job over at the Emerging Threats Discourse , and while technically much of what I wrote does have to do with threat intelligence, it isn’t about a particular threat, more than it is about learning how to do various things related to threat research, detection engineering, NSM stuff, and homelabbing. So ultimately, this is what I wanted to do: Use...

IFIN
Setting Up Snort To Secure Your Network - Open Source For You

Snort is a popular, open source intrusion detection system that monitors traffic in real time to detect malware. Here’s a detailed explanation of how to set

Open Source For You

"What was that?"

"Oh, that was an experimental snort."

"Okay, then. Carry on."

#snort #CarryOn

Anyone have intel on a 2026 #Snort calendar?
@da_667 you know you sell people a bunch of pc butfor medium biz they really can benefit from stuff like debian, dual nas, opnsense, pihole, - the basics but also faster networking, ids/ips system, pkt cap 24/7, even ssl proxy, rsync backups to nvme. having more visibility into the network allows organizations to leverage the data that piles up in the db as well as real time. a point needs to be made for the minimum raw basic infrastructure and then orgs can realize gestalt #p2v #fwupd #elk stack scripting #dashboards #centralized logs #netbox #zeek #snort #sigs
Snort - Network Intrusion Detection & Prevention System

Snort is an open-source, free and lightweight network intrusion detection system (NIDS) software for Linux and Windows to detect emerging threats.

I mentioned already that I now have more than 25 years of professional experience in #InfoSec.

If I do remember correctly, one of my first experimental installations of an #IntrusionDetectionSystem (#IDS) was the #NetworkFlightRecorder around 2000, together with one of the early #VulnerabilityScanner-s called "Satan".

Shortly after that, we began to develop our own distributed IDS based on #Snort.

https://www.usenix.org/legacy/publications/library/proceedings/lisa97/full_papers/01.ranum/01_html/main.html

https://en.wikipedia.org/wiki/Security_Administrator_Tool_for_Analyzing_Networks

Papers - LISA 97

Snort - Network Intrusion Detection & Prevention System

Snort is an open-source, free and lightweight network intrusion detection system (NIDS) software for Linux and Windows to detect emerging threats.

Voy a abrir un melón, qué IPS/IDS sería más recomendable? Snort o Suricata?

Es para un Netgate 2100 con Pfsense.
#snort #suricata #cybersecurity #pfsenseplus #Netgate2100 #yapaque