Learn intrusion detection with Snort and understand how network attacks are detected.
signatures, alerts and traffic inspection
understand rule structure
detect suspicious lab traffic
separate noise from useful detections
investigate a simulated compromise