diff --git a/ucstudent/pl-apresentação#1 (1).pdf b/ucstudent/pl-apresentação#1 (1).pdf new file mode 100644 index 0000000..c947b48 Binary files /dev/null and b/ucstudent/pl-apresentação#1 (1).pdf differ diff --git a/ucstudent/pl-apresentação#1.pdf b/ucstudent/pl-apresentação#1.pdf new file mode 100644 index 0000000..768cce7 Binary files /dev/null and b/ucstudent/pl-apresentação#1.pdf differ diff --git a/ucstudent/pl-exercícios#0.pdf b/ucstudent/pl-exercícios#0.pdf new file mode 100644 index 0000000..c631e82 Binary files /dev/null and b/ucstudent/pl-exercícios#0.pdf differ diff --git a/ucstudent/pl-exercícios#1.pdf b/ucstudent/pl-exercícios#1.pdf new file mode 100644 index 0000000..27a8121 Binary files /dev/null and b/ucstudent/pl-exercícios#1.pdf differ diff --git a/ucstudent/pl-practical exercises #2-resolution notes.pdf b/ucstudent/pl-practical exercises #2-resolution notes.pdf new file mode 100644 index 0000000..df79753 Binary files /dev/null and b/ucstudent/pl-practical exercises #2-resolution notes.pdf differ diff --git a/ucstudent/pl-practical exercises #2.pdf b/ucstudent/pl-practical exercises #2.pdf new file mode 100644 index 0000000..cb15710 Binary files /dev/null and b/ucstudent/pl-practical exercises #2.pdf differ diff --git a/ucstudent/pl-practical exercises #3-resolution notes.pdf b/ucstudent/pl-practical exercises #3-resolution notes.pdf new file mode 100644 index 0000000..ad8ee30 Binary files /dev/null and b/ucstudent/pl-practical exercises #3-resolution notes.pdf differ diff --git a/ucstudent/pl-practical exercises #3.pdf b/ucstudent/pl-practical exercises #3.pdf new file mode 100644 index 0000000..5e858b1 Binary files /dev/null and b/ucstudent/pl-practical exercises #3.pdf differ diff --git a/ucstudent/pl-practical exercises #4-resolution notes.pdf b/ucstudent/pl-practical exercises #4-resolution notes.pdf new file mode 100644 index 0000000..e00a76e Binary files /dev/null and b/ucstudent/pl-practical exercises #4-resolution notes.pdf differ diff --git a/ucstudent/pl-practical exercises #4.pdf b/ucstudent/pl-practical exercises #4.pdf new file mode 100644 index 0000000..42b5966 Binary files /dev/null and b/ucstudent/pl-practical exercises #4.pdf differ diff --git a/ucstudent/pl-presentation#2.pdf b/ucstudent/pl-presentation#2.pdf new file mode 100644 index 0000000..89e1f2d Binary files /dev/null and b/ucstudent/pl-presentation#2.pdf differ diff --git a/ucstudent/pl-presentation#3.pdf b/ucstudent/pl-presentation#3.pdf new file mode 100644 index 0000000..2f3fc36 Binary files /dev/null and b/ucstudent/pl-presentation#3.pdf differ diff --git a/ucstudent/pl-presentation#4.pdf b/ucstudent/pl-presentation#4.pdf new file mode 100644 index 0000000..e241ea7 Binary files /dev/null and b/ucstudent/pl-presentation#4.pdf differ diff --git a/ucstudent/pl-suricata on centos - installation notes.txt b/ucstudent/pl-suricata on centos - installation notes.txt new file mode 100644 index 0000000..7fcc1e7 --- /dev/null +++ b/ucstudent/pl-suricata on centos - installation notes.txt @@ -0,0 +1,83 @@ + +# Installation of Suricata (CentOS 9) with support for the "nfq" module +############################################################################ + +##### Option 1: Install via YUM package manager +yum install epel-release -y +yum install suricata + +# Check that suricata has support for NFQ +suricata --build-info | grep NFQ +# Update rules +suricata-update +# Check configuration +suricata -T -c /etc/suricata/suricata.yaml + + +##### Option 2: Install from source +##### Download and install required packages +yum install epel-release -y +dnf config-manager --set-enabled crb +yum groupinstall "Development Tools" -y +##### Download and install required packages +yum install epel-release -y +dnf config-manager --set-enabled crb +yum groupinstall "Development Tools" -y + +yum install -y \ +libpcap-devel \ +pcre-devel \ +libyaml-devel \ +file-devel \ +jansson-devel \ +libcap-ng-devel \ +libnetfilter_queue-devel \ +libnfnetlink-devel \ +libnetfilter_queue \ +zlib-devel \ +pcre2-devel \ +rust cargo \ +wget \ +tar + + +# Download the latest stable version of Suricata +cd /usr/src/ +wget https://www.openinfosecfoundation.org/download/suricata-8.0.3.tar.gz +tar zxvf suricata-8.0.3.tar.gz + +# Compile and install +cd suricata-8.0.3/ +./configure --enable-nfqueue + +make -j$(nproc) +make install +make install-conf +make install-rules +ldconfig + +# Update rules +/usr/local/bin/suricata-update + + +##### Check configuration +/usr/local/bin/suricata --build-info | grep NFQ +suricata -T -c /usr/local/etc/suricata/suricata.yaml + + +##### Example usage + +# Send packets to suricata via NFQUEUE +iptables -A OUTPUT -j NFQUEUE --queue-num 0 +iptables -A INPUT -j NFQUEUE --queue-num 0 + +# Run suricata in inline mode (queue 0) +suricata -q 0 -c /usr/local/etc/suricata/suricata.yaml + + +##### Check logs +# Analisar alertas resumidos no ficheiro "fast.log" +cat fast.log +# Analisar informação detalhada dos ataques no formato JSON no ficheiro "eve.json" +cat eve.json | jq 'select(.event_type=="alert")' | more + diff --git a/ucstudent/pl0-praticas-apresentação.pdf b/ucstudent/pl0-praticas-apresentação.pdf new file mode 100644 index 0000000..0eed3a1 Binary files /dev/null and b/ucstudent/pl0-praticas-apresentação.pdf differ diff --git a/ucstudent/practical assignment 1.pdf b/ucstudent/practical assignment 1.pdf new file mode 100644 index 0000000..2a2c452 Binary files /dev/null and b/ucstudent/practical assignment 1.pdf differ diff --git a/ucstudent/support-vm_install_v2025-26.pdf b/ucstudent/support-vm_install_v2025-26.pdf new file mode 100644 index 0000000..c469257 Binary files /dev/null and b/ucstudent/support-vm_install_v2025-26.pdf differ diff --git a/ucstudent/t0-apresentação.pdf b/ucstudent/t0-apresentação.pdf new file mode 100644 index 0000000..bff3cf5 Binary files /dev/null and b/ucstudent/t0-apresentação.pdf differ diff --git a/ucstudent/t1-conceitos_seguranca.pdf b/ucstudent/t1-conceitos_seguranca.pdf new file mode 100644 index 0000000..6439853 Binary files /dev/null and b/ucstudent/t1-conceitos_seguranca.pdf differ diff --git a/ucstudent/t2-firewalls and intrusion detection.pdf b/ucstudent/t2-firewalls and intrusion detection.pdf new file mode 100644 index 0000000..cff1a61 Binary files /dev/null and b/ucstudent/t2-firewalls and intrusion detection.pdf differ diff --git a/ucstudent/t3-data integrity.pdf b/ucstudent/t3-data integrity.pdf new file mode 100644 index 0000000..ef77585 Binary files /dev/null and b/ucstudent/t3-data integrity.pdf differ diff --git a/ucstudent/t4-symmetric encryption.pdf b/ucstudent/t4-symmetric encryption.pdf new file mode 100644 index 0000000..13e947a Binary files /dev/null and b/ucstudent/t4-symmetric encryption.pdf differ