NullMixer Network Detection - Crafting a Custom IDS Rule with Suricata

While monitoring and alerting on network traffic can be incredibly useful, you can enhance that capability by adding your own custom IDS rules. In this video, we'll look into the Nullmixer traffic and craft a custom rule for detection. We'll take about rule syntax basics, how to identify patterns in the traffic and a rudimentary process for rule development and testing. By the end of this video, you'll have insight into how to craft your own custom IDS rules.

icymi …

alerting basics detection development end identify ids monitoring network network detection network traffic own patterns process rules suricata testing traffic video