Editing Suricata (software) (section)

==Features==

Like other IDSes, Suricata provides [[threat]] detection capabilities. Like a [[Firewall (computing)|firewall]], Suricata provides traffic filtering and monitoring, but Suricata provides network administrators with the ability to write and enforce detection rules.<ref name="xda">{{Cite web|url=https://www.xda-developers.com/why-use-suricata-or-snort-for-your-home-lab-firewall/|first=Joe|last=Rice-Jones|title=5 reasons to use Suricata or Snort for your home lab firewall|date=March 26, 2025|website=[[XDA Developers]]}}</ref>

Suricata is able to detect common attack vectors such as [[port scanning]], [[denial-of-service]], [[pass-the-hash]], and [[brute-force attacks]].<ref name="xda"/>

Typically, a major update of Suricata is released every 3 months.<ref name="xda"/>