By Brian Laing and Jimmy Alderson https://inguardians.box.com/shared/static/3swck8ula5mx5qosjwne1w3ptd4fq50j.pdf
Exploring the ins and outs of Snort front ends by Mike Poor https://inguardians.box.com/shared/static/hcx7dfnn87kckatukunngao107scyiz1.pdf
Learning to use packet crafting tools to test our defenses by Mike Poor https://inguardians.box.com/shared/static/4pwaigav97t90b31wvff8mrvl4llb50j.pdf
Correlating System and Application Logs with Traffic Traces and IDS Alerts by Mike Poor https://inguardians.box.com/shared/static/papgh6vwh0a4ee4o3snp2dnaz2ey4szq.pdf
SANSFIRE Keynote on Early Warning Systems by Mike Poor https://inguardians.box.com/shared/static/hgy9lnemxgxtqjeeettwvq3uyo2cub6w.pdf
By Brian Liang and Jimmy Alderson. This How-to Guide demonstrates how to scale IDS on a large network or ambiguous perimeter using network taps, comparing this to prior methods using network hubs and switch spanning ports....