stamusnetworks/suricata-4-analysts

The Security Analyst’s Guide to Suricata

The Security Analyst’s Guide to Suricata

Introduction

Stamus Networks is pleased to offer the first ‘open source’ Suricata-focused book, The Security Analyst’s Guide to Suricata. Written by the founders of Stamus Networks, Éric Leblond and Peter Manev, this project provides SOC analysts and threat hunters with information on entry points and in-depth coverage for the most important Suricata features.

The book is not to act as a replacement for the Suricata manual, which is a valuable source of information and should be used as a reference tool by Suricata users. Instead, its unique ‘open source’ format will grow and evolve over time with ongoing input from Éric and Peter as well as contributions and feedback from the Suricata community.

Contribution

We are listing the code/text for the book here, but you can also find the latest published version of the book at Stamus Networks. We welcome contributions to the book and you can propose updates and provide feedback on this Github. If you want to contribute a specific topic, please check existing issues and, if needed, open one describing your addition so we can tell you if it is inline with the content we project on the book and has a chance to be accepted.