Hello everyone, Just wanted to know is there any way that suricata can detect nmap scans for internal traffic? I wanted to detect when an attacker is doing Recon on my Network from the inside, I tried simple rules as well rules from ET to detect scans going outbond but not for Internal.

Nmap Detection via Suricata

syoc May 2, 2022, 7:49am 2

2 Likes

Topic		Replies	Views
NMAP detection rules for Suricata in GitHub Rules ips , suricata , opnsense	6	753	May 26, 2024
Suricata doesn't detect nmap scan suricata	1	578	December 12, 2023
Suricata-IDS and Nmap Rules community	8	10518	August 20, 2020
Outbound: Port Scanning & Brute Force detection Help	5	4291	March 22, 2022
Create rules on pfsense Rules ips , pfsense , suricata	2	898	September 2, 2022