Cyber sec tech – project
Kibana for k-space
193.40.101.76:7443 ids
:8443 log (kibana)
:9443 moloch
:8000 cuckoo
IDS, IPS HIDS/HIPS, NSM
intrusion detection system
intrusion prevention system
Host IDS
Rule based /behavior based
Where to start
Steamus network SELKS (preconfigured image)
Suricata
Ransomware are using specific TLS certificate,
RAPID 7
SSLyze
https map
Certificate chain validation, vulnerability (heartbleed…)
Moloch
Bonus Lab
virustotal.com wargame. Login first using taltech mail.
