PP078: Using Free Tools for Detection Engineering
Matt Gracie from Security Onion Solutions discusses building scalable detection pipelines using open-source tools like Zeek, Suricata, YARA, and Security Onion on the Packet Protector podcast.
MAIN POINTS
- Security Onion is an open-source platform for detection engineering and network security.
- Zeek, Suricata, and YARA are effective tools for scalable detection pipelines.
- Matt Gracie has over 15 years of experience in network security.
- The podcast focuses on using free tools for detection engineering.
TAKEAWAYS
- Open-source tools can effectively enhance network security monitoring.
- Security Onion Solutions provides a platform for comprehensive log management.
- Experience and expertise are crucial for implementing detection pipelines.
- Utilizing free resources can significantly reduce costs in security engineering.