Chapter_8_Sensor Built-in Detection Modules

Question 1

List the built-in modules

Answer 1

Port scan Detection Module
Man-in-the-Middle (MitM) Module
Malformed Packet Detection Module
Frequent Event Aggregation Module
Visual Analytics Module
Event Logging Module

Question 2

What built-in Module detects ARP poisoning?

Answer 2

Man-in-the-Middle Module

Question 3

What would the Malformed Packet Detection Module detect?

Answer 3

Malformed packets

Packets that do not comply with the protocol specification