Purple Edge
Get started

Network Security Monitoring

intermediate3 labsSubscription

Detect attacks on the wire: dissect packets in Wireshark, deploy Suricata for signature-based IDS, and extract investigative metadata from Zeek logs.

This path is available with a Purple Edge subscription. Sign in to read the full overview and start the labs.

Labs in this path

  1. 1
    intermediate Hands-on lab Subscription

    Packet Analysis with Wireshark

    Dissect a malicious packet capture in Wireshark: build display filters, follow TCP/HTTP streams, and extract IOCs like exfil destinations and malware User-Agents.

    45 min3 tasksNetwork Security Monitoring
  2. 2
    intermediate Hands-on lab Subscription

    Intrusion Detection with Suricata

    Stand up Suricata as a signature-based IDS, dissect and write detection rules, enable them, and triage the resulting alerts down to the firing SID in eve.json and fast.log.

    50 min3 tasksNetwork Security Monitoring
  3. 3
    intermediate Hands-on lab Subscription

    Zeek & Network Metadata

    Investigate with Zeek's connection logs instead of full packets: read conn.log, dns.log, and http.log to spot C2 beaconing and DGA/tunneling DNS, and pull the IOCs that drive your hunts.

    50 min3 tasksNetwork Security Monitoring

Unlock this lab

Launch the lab in your browser. Real Kali, Ubuntu and Windows targets, guided step by step. No setup, no VM downloads.

Create free accountSign in to start

Updated 2026-06-15