Intro to Traffic Analysis and Suricata Signature Development Lab - Bsides SLC 2022

Tutorials, Tips & Tricks
1

Interested in learning how to write signatures but need some help getting started? Check out our Traffic Analysis and Suricata Signature Development Lab given at BSidesSLC 2022.

The lab walks through the process of building a signature from scratch to detect CnC exfiltration. Download the VM, follow along and learn how to use Dalton to test your signatures!

VM, Slides, Recording: BSidesSLC 2022 - Google Drive

3 Likes
2

Good tutorial, thanks for posting! I didn’t have time to work through the examples, but as a consumer of signature feeds, it was informative context to see the presenter work through them.

2 Likes