#Suricata

ADR 0021: Intrusion detection and prevention in lightweight layers

Suricata on the firewall, CrowdSec shared by every machine with blocking at the firewall, detection rules on the centralised logs; no heavy SIEM.