What is Suricata?

Suricata is a free and open-source, high performance Network Threat Detection Engine. It is capable of real-time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing. Suricata inspects network traffic using a powerful and extensive ruleset and signature language, leveraging both anomaly-based and signature-based detection mechanisms. It is commonly used by security professionals for network security monitoring, threat hunting, and incident response.