WEBVTT

00:00:01.370 --> 00:00:04.610
[Autogenerated] we were just able to demonstrate the installation,

00:00:04.620 --> 00:00:08.980
configuration and functionality of pulled pork as well as talk

00:00:08.980 --> 00:00:11.930
about some of the rules and rule set nuances.

00:00:12.490 --> 00:00:16.980
Now it's time to wrap up the module and the course we started

00:00:16.980 --> 00:00:19.870
out this course by talking about the general capabilities that

00:00:19.870 --> 00:00:22.500
snort has and how we can expand them.

00:00:23.350 --> 00:00:26.870
We learned about how to integrate the I PS tool with the open

00:00:26.870 --> 00:00:30.200
source PF sense firewall and explored some of the

00:00:30.200 --> 00:00:32.470
configurations and behavior surrounding that.

00:00:33.390 --> 00:00:36.720
We also discussed how to configure snore and send

00:00:36.730 --> 00:00:38.760
data to the open source sim tool,

00:00:38.770 --> 00:00:43.670
the Elastic Stack After that we discussed optimizing snort data.

00:00:44.440 --> 00:00:48.350
This conversation started out by showing the outputs for snort and

00:00:48.350 --> 00:00:52.290
highlighting the Elastic Stack and how you can view the data in Kibana

00:00:52.540 --> 00:00:56.600
you also learned about the fields and how you can manipulate them to

00:00:56.600 --> 00:00:58.590
suit the organization's needs.

00:00:59.240 --> 00:01:04.000
We were able to see how snore integrates with and is built into

00:01:04.080 --> 00:01:06.640
the Cisco secure firewall solution as well.

00:01:07.670 --> 00:01:11.610
You learned about how snorts pre processors work to assist the tool

00:01:11.610 --> 00:01:14.070
in decoding and analyzing the network traffic.

00:01:14.850 --> 00:01:19.140
We focused on three specific ones and saw each of them in the lab.

00:01:19.730 --> 00:01:26.050
They were the http inspect ports can and app IDE pre processors or inspectors.

00:01:26.960 --> 00:01:31.270
These really help to expand the capabilities of the tool in very easy ways.

00:01:32.050 --> 00:01:36.340
We also detailed using plugins with snort during this module,

00:01:36.360 --> 00:01:40.280
the various plugins and plugin types were highlighted and

00:01:40.280 --> 00:01:43.570
we were able to utilize a free package that comes with

00:01:43.580 --> 00:01:45.780
example plugins to see them.

00:01:46.400 --> 00:01:50.200
We installed this North three extras package and saw how you can

00:01:50.200 --> 00:01:53.170
pull application statistics using the app,

00:01:53.170 --> 00:01:53.970
IDE listener.

00:01:54.880 --> 00:01:59.170
Finally, we talked about pulled pork and rural management in general,

00:01:59.810 --> 00:02:04.880
you were able to see the installation configuration and the usage of this tool.