Skill UI

This guide details the deployment and configuration of Suricata as a high-performance, inline Intrusion Prevention System (IPS). It covers setting up NFQueue mode, writing custom detection rules, managing commercial and community rulesets (like Emerging Threats), and optimizing performance for active, real-time blocking of malicious network traffic. Essential for robust security architecture and compliance.

Configure NextDNS as an encrypted DNS resolver (DoH/DoT) to enforce zero trust principles at the network layer. This skill guides users on deploying real-time threat intelligence filtering, blocking malicious domains, preventing cryptojacking, detecting DNS rebinding, and enforcing strict organizational DNS policies across endpoints, aligning with modern cybersecurity standards.