Snort IDS Rules Tutoring Session
Budget: $10 – $30 USD
I’m working through an assignment on Snort and need a patient tutor who can walk me through writing detection rules from scratch. My current knowledge is at the beginner level, so every concept, keywords, rule structure, testing with pcaps, needs to be unpacked in plain language before we move on.
You and I can collaborate in whichever way proves most productive: you can draft the rules first and we dissect them together, or we can screen-share and build them line by line in real time. I’m comfortable with either flow as long as, by the end, I understand exactly why each option, content modifier, and threshold is there.
I also have some questions about the command I'm giving to run Snort, so it would be extremely helpful to spend a few minutes on this as well.
The assignment questions will be shared up front if you are given the job. I’d like you to:
• produce working Snort rules that satisfy the prompts
• annotate each rule so I can see the logic behind it
• hop on a follow-up call to cement the ideas and let me test my understanding live
A few quick things. Many replies I get a so stuffed with words from ai that they're unreadable. I'll respect you more and give more weight to your bid if you write it yourself and don't have the ai do it. I also need to make sure people are reading and understanding this job BEFORE they bid. So to weed out auto bids and people who obviously don't read job postings please start your bid with the word "hummingbird" unless you are male then please use the word "jaybird" at the start of your bid. Failure to do so will result in your bid being hidden and not considered.
Also please don't place a bid if you won't answer any questions prior to winning the job, or you don't actually plan to do the job if you are given it. For some reason I need to include this now because this is a thing.
Any relevant experience you can list showing me that you can do this is welcome.
And last, at no point will anyone be using ssh to access my vm, this will all be done via a phone call, a screen share, or google docs with a phone call. I anticipate that this will all take less than 60 minutes to complete everything.
You and I can collaborate in whichever way proves most productive: you can draft the rules first and we dissect them together, or we can screen-share and build them line by line in real time. I’m comfortable with either flow as long as, by the end, I understand exactly why each option, content modifier, and threshold is there.
I also have some questions about the command I'm giving to run Snort, so it would be extremely helpful to spend a few minutes on this as well.
The assignment questions will be shared up front if you are given the job. I’d like you to:
• produce working Snort rules that satisfy the prompts
• annotate each rule so I can see the logic behind it
• hop on a follow-up call to cement the ideas and let me test my understanding live
A few quick things. Many replies I get a so stuffed with words from ai that they're unreadable. I'll respect you more and give more weight to your bid if you write it yourself and don't have the ai do it. I also need to make sure people are reading and understanding this job BEFORE they bid. So to weed out auto bids and people who obviously don't read job postings please start your bid with the word "hummingbird" unless you are male then please use the word "jaybird" at the start of your bid. Failure to do so will result in your bid being hidden and not considered.
Also please don't place a bid if you won't answer any questions prior to winning the job, or you don't actually plan to do the job if you are given it. For some reason I need to include this now because this is a thing.
Any relevant experience you can list showing me that you can do this is welcome.
And last, at no point will anyone be using ssh to access my vm, this will all be done via a phone call, a screen share, or google docs with a phone call. I anticipate that this will all take less than 60 minutes to complete everything.