SnortML

[Hussam Alamee]

I have Ubuntu 20.04 and Snort3 installed and run well in detecting some type of attackes using the required rules. Now I want to use SnortML and just want to see how it can be used in my invironment to detect an attack that it should be pre trained on it. I want to know what I need to use as beginner

[Mark Elsen]

  - FYI : https://www.cisco.com/c/en/us/products/collateral/security/firewalls/detecting-zero-days-with-snortml-wp.html

  M.

[Hussam Alamee]

Thanks for reply but I saw this document from cisco and its was the only thing available with few videos , no more details !!