Sourcefire Quick Tip: Custom RNA Service Detection
As part of my Sourcefire “Quick Tip” series, a new video has been uploaded by our marketing guru’s to YouTube.
This time I ramble on about creating custom service detectors for Sourcefire’s RNA engine. This allows you to detect the network applications in use on your network and track them in the context of IPS events, real-time network change detection, Service and host white-listing as well as general network mapping.
I hope it’s of use to you out there. I haven’t got my next quick-tip subject planned yet, so if anyone has a suggestion please let me know.
If you would like to learn more about RNA, take a read here.