Open michaelkeevildown opened 8 years ago
The data needed to illustrate a DDOS attack are:
It would be great to use graph on this dataset, need to keep that in mind.
We will need 2 config files
Look at tcpdump and analyse how this can be sliced and diced in Logstash. This can then power:
Example tcpdump port scan payload:
https://gist.github.com/michaelkeevildown/ebaa1d92c34d83bd088024c1ccc416d1
What config do I need to build a DDOS real-time demo?