[Autogenerated] securing information is one of the toughest task I.
T.
Professionals have in their organizations.
There are so many tools out in the world to help with this.
And integrating them with each other can help increase
their functionality and their usage.
Many organizations have needs that go beyond the tool at times
out of the box tools like snore work great.
You can customize the default settings to your liking and needs but sometimes
there's a specific capability that you're looking for that you need to build
yourself or use another tool for integrations,
APIs and plugins allow us to help streamline these use cases to make
them a bit easier to get started with in the I.
D s in I.
P.
S.
Space or the group of tools that inspect traffic.
There's a lot of information that's being seen and ingested sharing
and using this information in effective ways is something that
organizations want know something they need.
We have to be able to easily have an alert,
trigger response or workflow or have our sock analysts be able to
add additional context information from the inspection that occurs
to the data for the investigations or even just get statistics on
what applications are being seen in the network in a nice visually
appealing manner.
Hi everyone.
I'm joe Abraham and welcome to my course extensions
frameworks and integrations used with Snort.
I'm excited to be teaching you these capabilities and how
they can be used in your environments.
We'll be exploring the various options for expanding snorts
capabilities and focus on a few of them.
This course is all about snort and using it with tools like firewalls,
sims and rule managers to see how we can better capture,
share and use the data that it provides.
So let's introduce the team here at Globomantics the robotics company.
We're going to be working with Callie, our security engineer.
She'll be setting up our snort capabilities and experimenting with
the use cases that will be covered in this course.
Trey is our stock analyst that will be helping her identify any
specific capabilities required by the stock for this.
So you know that this course is about expanding snorts capabilities
but what are the topics that will be covered?
Well,
it'll talk about how we can expand the snort usage and
capabilities in many different ways.
You'll start out by learning about using Snort with
open source firewalls and sims.
Then you'll learn how to visualize the data Snort provides as well as
see how you can better manage and optimize snort using Cisco secure
firewall after the snort pre processors will be covered and you'll
look at a few of them in detail.
You'll learn about the snort C++ extras package and how to install
and use that as well as additional plugins and how to manage this
rule sets using the tool called pulled pork and no barbecue food
can't manage snort rules.
This is a different kind of pulled pork.
Now before we get started with all the fun stuff I want to
mention the Pluralsight skill path that this is a part of if
you're rusty or don't know snort,
I highly recommend watching other courses in this path.
They will get you a nice overview of what it does,
how to write rules and show you how to install it.
If you want to try to follow along with this course,
you'll need that start installation to be completed and have the
Elastic Stack and PF sense installed in your network.