Installing EveBox in REMnux - A Lightweight UI for IDS Rules and Data
Often when setting up your tools to perform malware analysis, you need things to be light and simple and inspecting IDS rules is no different. Evebox is just that - it is a light-weight, web-based graphical manager used to investigate Suricata data such as IDS rules. This allows you to explore not only the network traffic in the PCAPs you are analyzing, but also to generate data such as flow IDs and JA3 hashes to help with your analysis. In this video, we'll install Evebox and utilize it's one-shot mode to leverage it's UI without having to depend on more robust infrastructure, such as with an Elastic stack.
Cybersecurity, reverse engineering, malware analysis and ethical hacking content!
🎓 Courses on Pluralsight 👉🏻 https://www.pluralsight.com/authors/j...
🌶️ YouTube 👉🏻 Like, Comment & Subscribe!
🙏🏻 Support my work 👉🏻 / joshstroschein
🌎 Follow me 👉🏻 / jstrosch , / joshstroschein
⚙️ Tinker with me on Github 👉🏻 https://github.com/jstrosch
If you missed my video on installing Suricata in REMnux, you can check it out here: • Installing and Configuring Suricata in REMnux .