Defense Tools

Question 1

What is Suricata?

Answer 1

open-source IDS, IPS, and network security monitoring (NSM) tool

Question 2

What is Suricata used for?

Answer 2

monitor and analyze network traffic in real-time to detect and respond to security threats and anomalies

Question 3

What is Snort?

Answer 3

open-source network IDS/IPS

Question 4

What is Snort used for?

Answer 4

monitoring and analyzing network traffic to detect and respond to security threats and anomalies

Question 5

What is Zeek?

Answer 5

open-source network security monitoring and analysis platform

Question 6

What is Zeek used for?

Answer 6

passively monitor network traffic and generate detailed logs and metadata that provide deep insights into network activity, security events, and potential threats

Question 7

What is the Uncoder.io tool used for?

Answer 7

transform Sigma rules, IOC lists, and other platform query syntaxes into custom hunting queries prepared for execution in SIEM and XDR

Question 8

What IOCs are supported by Uncoder.io?

Answer 8

• IPs
• Domains
• URLs
• Hashes
• Emails
• Files