About this document
Snort and Splunk Integration Guide by boomdoom3344 is a document available to read on EtoBox.
The document details the integration of the Snort network intrusion detection system (NIDS) with Splunk for threat hunting and penetration testing in a custom-built environment. It outlines the setup process for Snort on CentOS 7, the installation of the Mutillidae web application for testing, and the creation of rules to detect various types of attacks. The project also discusses troubleshooting issues encountered during the setup and concludes with the potential of Snort as a packet analyzer.
- Author
- boomdoom3344
- Language
- EN