Suricata

I came back to my lab after months, found a mess, and rebuilt it from scratch: a VPS tunnel, four DMZs, an inline IDS and a SOC that only accepts logs.

Decrypting inbound HTTPS and inspecting it with an inline Suricata IPS before it reaches a DMZ web server.