In this guide, we are going to setup standalone deployment architecture where all components are running on the same server. Maltrail is made up of three components The Sensor which monitors traffic for threats, the Server which provides logging for the event details of the detected malicious traffic, and the Client which provides visualization and reporting of the event details. Apart from using the lists on public domains, Maltrail can also heuristically analyze the traffic to detect unknown or new threats. The trail in question includes domains names, IP addresses, URLs, HTTP User Agent header values associated with Malicious traffic.
It can also utilize custom lists created by the users themselves as well as reports from various AntiVirus solutions. It utilizes the blacklists containing malicious or suspicious trails that are available in public domain. Maltrail is a malicious traffic detection system.
Welcome to our guide on how to install and configure Maltrail on Ubuntu 18.04.
0 kommentar(er)
