Tolkien Ring - Suricatta Regatta Walkthrough
" Help detect this kind of malicious activity in the future by writing some Suricata rules. Work with Dusty Giftwrap in the Tolkien Ring to get some hints." Challenge Difficulty: 3/5 Progressing further with the challenge after completing Windows Event Logs , we speak to Fitzy shortstacks and we are being asked to write sruicatta rules which will alert on specific traffic. If this is your first introduction to suricatta rules, below is a quick primer before we get to the solutions. Based on the learning from the suricatta site , below is the rule schema <action> alert, pass, reject…… - defines the action you would like the system to take when you rule hits the condition <protocol> dns, snmp…… - defines on which protocol you would like this rule to be active on <source> can be a specific source IP or any <port> can be a specific source Port or any <direction> -> -< <> -defines the direction of the traffic <desti...