Snort

Version: 1.1
Updated: Jul 18, 2023

The Snort is a free open source network intrusion detection system and intrusion prevention system.

Actions

• IP Blocklist (Enrichment) - Fetch IP indicators from Snort.

Snort in Automation Service and Cloud SOAR

1. Access integrations in the Automation Service or Cloud SOAR.
2. After the list of the integrations appears, search for the integration and click on the row.
3. The integration details will appear. Click on the "+" button to add new Resource.
   
4. Populate all the required fields (*) and then click SAVE.
   • URL. 'https://www.snort.org'.
     
5. To make sure the resource is working, hover over the resource and then click the pencil icon that appears on the right.
   
6. Click Test.
   
7. You should receive a successful notification in the bottom right corner.
   

Change Log

• December 13, 2022 - First upload
• July 18, 2023 (v1.1) - Removed leading/trailing spaces