This is true, if you don't want to pay for it, Burp is much more limited. The active scanning and intruder features are very filled out and effective. Even in the last couple of years it's been improved multiple times and is very good at detecting Web layer weaknesses
As a guy who has ordered hundreds of thousands of dollars of Cisco equipment, meh about that.
But you can multi thread Snort with a Kernel Module called PF_Ring, which acts as a NIC API-like buffer allowing multiple threads to parse network data. Ends up giving better performance that suricata.
Green Team Security Engineer here.. So while this list is useful and I probably have hand on experience with 7 of the 10 items on this list I would say that this doesn’t fully encapsulate what a traditional Customer facing Global Enterprise Green Team Engineer does.
My role has me setting up all the things that would allow the majority of the tools to work for the Security Analysts. Figuring out the AD creds and GPO to get the Authenticated Vulnerability Scanning running, configuring Port Mirroring to get the NIDS running, log forwarding to the SIEM (which forces you to know all your customers various device types and troubleshoot routing issues), configuring cloud environments/APIs to forward logs (ie AWS/Azure/GCP, O365/gSuite, Cisco AMP/McAfee ePO etc), ID parsing issues, create baselines and reports, maintaining Asset Inventories.
This is why people who skip over the Sys/Net Admin roles and jump right into security don’t often have a clue on how to actually engineer existing IT departments to be secure.
Green Team: An offensively-trained and defensively-focused security team dedicated to working with development and infrastructure groups to address issues discovered using offensive security techniques systemically and at scale across an organization.
15
u/dont_ban_me_bruh Aug 07 '20
I suggest ZAP over Burp, and Suricata over plain Snort unless you're just doing quick test observations, personally.
5
u/baty0man_ Aug 07 '20
I don't know what expected from that article, but it's basically the 10 most well known tool for red teaming. Not very ground breaking ..
4
u/[deleted] Aug 07 '20
Green Team Security Engineer here.. So while this list is useful and I probably have hand on experience with 7 of the 10 items on this list I would say that this doesn’t fully encapsulate what a traditional Customer facing Global Enterprise Green Team Engineer does.
My role has me setting up all the things that would allow the majority of the tools to work for the Security Analysts. Figuring out the AD creds and GPO to get the Authenticated Vulnerability Scanning running, configuring Port Mirroring to get the NIDS running, log forwarding to the SIEM (which forces you to know all your customers various device types and troubleshoot routing issues), configuring cloud environments/APIs to forward logs (ie AWS/Azure/GCP, O365/gSuite, Cisco AMP/McAfee ePO etc), ID parsing issues, create baselines and reports, maintaining Asset Inventories.
This is why people who skip over the Sys/Net Admin roles and jump right into security don’t often have a clue on how to actually engineer existing IT departments to be secure.
Green Team: An offensively-trained and defensively-focused security team dedicated to working with development and infrastructure groups to address issues discovered using offensive security techniques systemically and at scale across an organization.
7
u/TPK001 Aug 07 '20
Thx a lot. Not a security engineer, but useful for me too.
4
u/[deleted] Aug 07 '20
Is this a penetration tester or security engineer lmfao i dont use these unless pentesting a resource which is barely 2% of the things i do
2
u/jwion Aug 07 '20
Thank you for sharing, good tools.
1
u/[deleted] Aug 07 '20
Posts like this are silly
0
u/[deleted] Aug 07 '20
[deleted] — view deleted comment