From Raw Packets to a SIEM Dashboard: Building a Network IDS Pipeline with Suricata and Splunk

The Wazuh lab I'd worked through earlier caught an attack by watching a single host's own logs. This lab tackled a related but genuinely different problem: catching the same kind of attack by inspecti