Cyber Threat Hunting in NNA

alopera · Post by **alopera** » Fri Feb 07, 2020 8:40 am

I want create querys for Cyber Threat Hunting using the data of NNA.
For example (a stupid example), detect the ping of death with netflow

is there anything done?

Post by **mbellerue** » Fri Feb 07, 2020 12:12 pm

This is usually accomplished with queries. Check out this article for more information.
https://support.nagios.com/kb/article/n ... es-74.html

There area a couple of example queries that come with NNA. One of which is checking for common bot net ports being accessed. As long as you know what you're looking for, you should be able to query for it.

alopera · Post by **alopera** » Sat Feb 08, 2020 3:43 am

Yes, I know
I want more examples (botnets) for use in NNA.
is there more examples?

benjaminsmith · Post by **benjaminsmith** » Mon Feb 10, 2020 4:34 pm

Hi @alopera,

Please see PM.

Nagios Support Forum

Cyber Threat Hunting in NNA

Cyber Threat Hunting in NNA

Re: Cyber Threat Hunting in NNA

Re: Cyber Threat Hunting in NNA

Re: Cyber Threat Hunting in NNA