Author: Miroslav Kohútik Sometimes you may need to provide PCAP files to third-party organizations or perhaps, in our case, publish a network traffic dataset. In order to not reveal your network infrastructure and/or other sensitive data, you must anonymize these…

Author : Miroslav Kohútik Operating System : Ubuntu 16.04 In this guide we will show you how to upgrade an Elasticsearch cluster located on a single machine. As an example we will use our Elasticsearch cluster that consists of five…

Authors : Tomáš Mokoš, Miroslav Kohútik In this article we will show you how to integrate alerts generated by IDS Suricata into network traffic capture tool Moloch. Installation guides for Moloch and Suricata can be found here and here, respectively….

Authors: Tomáš Mokoš, Miroslav Kohútik Upgrading Moloch to the latest version is not possible from all versions. Some older versions require installation of newer versions in an exact order. The oldest version of Moloch we have had in active use…

Author: Miroslav KohútikElastic Stack Version: 6.7.0Operating system : Ubuntu 16.04 Elastic stack is a group of products from the Elastic company built around the Elasticsearch database designed to process data from any type of source. In this article we will…

Author: Miroslav KohútikOperating system : Ubuntu 16.04 Scirius Community Edition is a web interface dedicated to Suricata ruleset management. It handles the rules file and updates of the associated files. This guide will walk you through the installation of Scirius…

Author: Miroslav KohútikOperating system : Ubuntu 16.04 This guide describes the individual steps of the installation process of Zabbix version 4.0 on Ubuntu 16.04 operating system. Zabbix is a free open-source monitoring software. Zabbix provides monitoring of many metrics about…

First, add the latest stable Suricata repository to APT: sudo add-apt-repository ppa:oisf/suricata-stable sudo apt-get update Now you can either install Suricata with: sudo apt-get install suricata or the Suricata package with built-in (enabled) debugging sudo apt-get install suricata-dbg Start with…

Author : Miroslav Kohútik Tested version : 1.7.0 Operating system : Ubuntu 16.04 Installation of Moloch is no trivial matter, that is why we have prepared this guide on how to set up the system in cloud environment. Before installing Moloch…

In this article we take a closer look at the ISCX IDS 2012 dataset created by the Canadian Institute for Cybersecurity. Network datasets serve for the purpose of training of network security systems, namely IDS and IPS. Analysis of the…