Hello everyone, Just wanted to know is there any way that suricata can detect nmap scans for internal traffic? I wanted to detect when an attacker is doing Recon on my Network from the inside, I tried simple rules as well rules from ET to detect scans going outbond but not for Internal.

Nmap Detection via Suricata

syoc May 2, 2022, 7:49am 2

2 Likes

Topic		Replies	Views
Suricata-IDS and Nmap Rules community	8	9339	August 20, 2020
Outbound: Port Scanning & Brute Force detection Help	5	3418	March 22, 2022
Create rules on pfsense Rules ips , pfsense , suricata	2	730	September 2, 2022
Nmap, Metasploit and other hacking tools Rules	6	347	November 19, 2023
Custom Rule to Allow only web browser traffic on port 80 Rules	6	1400	August 14, 2021