Skip to main content

Snort is the most widely used Open Source Intrusion Detection & Prevention System and is essential in defining malicious network activity.

This module will cover the need-to-know functionalities of Snort for any security analyst: Traffic Sniffing, Traffic Logging, Traffic Blocking, PCAP investigation, and creating IDS/IPS rules. You will learn how to use Snort for different purposes and create IDS/IPS rules for different threat scenarios. By the End of the module, you will master your Snort skills and be able to detect anomalies and threats and stop malicious activities.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.