Notes from the field

Writing

Long-form thinking on cyber defence, detection, and resilience — from Slackware-era honeypots through to AI-driven SOC analytics.

Showing posts tagged preprocessors — 1 result.

Snort plugins and the rise of the preprocessor

31 May 1999

Pure pattern-matching IDS engines are easy to evade. Snort's plugin architecture is starting to ship modules that defeat specific evasion techniques. A walk through how preprocessors work and why they matter.

evasion ids preprocessors snort