Network & Host Analysis: Network Operations

Securely operating a network requires tools to monitor detect and prevent breaches. Knowing what goes on and how to stop malicious traffic involves the use of Network Security Monitoring (NSM) security information and event management (SIEM) and intrusion detection and prevention systems (IDS/IPS). In this course youll explore these tools and implement Suricata and Kibana as NSM IDS IPS and SIEM solutions. Furthermore youll compare and contrast network defense tools. Youll examine NSM and SIEMs purpose and characteristics and outline how to implement and benefit from these techniques. Next youll install Suricata and Kibana and use their features for rule creation alerts logging scripting and integration. Finally youll integrate Suricata and Wireshark to leverage both tools capabilities so that you can operate your network securely.