All right,
we've come to the end of this module on Exploring Snort's Features and Modules.
Let's go to the summary and review what we learned so far in this
course. We started out by discussing how Snort's features and modules
can be used to extend Snort's functionality.
We then enabled some of these capabilities by
configuring three different modules.
We configured AppId, Port Scan, and alert_json to
meet Globomantics requirements.
These allowed us to track app usage at Globomantics,
to detect ports, and output alerts in JSON format for later use. In
the next module, we'll continue building on this,
taking the JSON output and integrating it with the
Elasticsearch, Logstash, and Kibana, abbreviated ELK Stack, to
create a visual display of the Snort alert data.
I'll see you there.