--- title: Reflections on Suricon 2022 description: Last week our team was in Athens for the biggest Suricata conference this year - Suricon 2022. This event was special for our team as we announced two major new initiatives. image: https://www.stamus-networks.com/hubfs/Screenshot%202022-11-16%20at%2020.26.07.png --- [![Stamus-Logo-with-R-color-small](https://www.stamus-networks.com/hubfs/Stamus-Logo-with-R-color-small.png "Stamus-Logo-with-R-color-small")](https://www.stamus-networks.com/?hsLang=en) # Reflections on Suricon 2022 by [Ken Gramley](https://www.stamus-networks.com/blog/author/ken-gramley) | Nov 16, 2022 | [Suricata](https://www.stamus-networks.com/blog/tag/suricata), [Events](https://www.stamus-networks.com/blog/tag/events) ![](https://www.stamus-networks.com/hubfs/Screenshot%202022-11-16%20at%2020.26.07.png) Last week our team was in Athens for the biggest Suricata conference this year - Suricon 2022. The event brought Suricata experts, developers, users and enthusiasts from around the world to share and discuss new features, experiences, and findings related to the open-source tool. As the event is already in the past, we have taken our notes and we are excited to share them with you. This year’s Suricon was a special event for us – our founders and Suricata core developers, Eric Leblond and Peter Manev, released their first book, entitled “The Security Analyst’s Guide to Suricata”. We handed out more than 50 signed copies to Suricata enthusiasts who want to elevate their experience with the open-source engine and answer any questions they might have had. If you want to get your PDF or eReader copy, you can download it [here](https://www.stamus-networks.com/suricata-4-analysts?hsLang=en) for free. Another notable announcement  from Stamus Networks at this year’s Suricon is the introduction of our new open-source ruleset for lateral detection in Microsoft Windows environments. Our Chief Strategy Officer – Peter Manev – announced its availability during his presentation and shared more information on how it works. If you missed his talk, you can [read our blog on the topic](https://www.stamus-networks.com/blog/new-open-ruleset-for-detecting-lateral-movement-with-suricata?hsLang=en) to learn more about this new ruleset. This year we hosted two pre-conference training sessions and three presentations. Markus Kont was one of the first presenters at the conference and delivered a very engaging talk about the use of Jupyter Notebooks with Suricata. He gave a live demonstration of how Stamus Security Platform (SSP) uses Jupyter Notebook for rule exploration and R&D prototyping for threat hunting and analytics and then answered questions from guests about the interactive data exploration tool. Eric Leblond presented a few hours later, and his session was focused on Suricata datasets. He demonstrated their use for network-based anomaly detection and how MISP threat intelligence sharing can be incorporated into the deployments for Suricata users. Eric also explored the opportunity for datasets to be used to check for matches against a list of known IOCs.  Our last session this year was led by Peter Manev. “Hunting with Metadata for Recently Disclosed CVEs” was based on how Suricata can help answer questions such as “Are we vulnerable?” or “Have we been breached?”. Peter dove deep into the components of Suricata for spotting specific CVE exploits and demonstrated what can be done to make it easier for users. During his presentation, he announced the new open-source ruleset for lateral detection, mentioned above. We are happy we had the opportunity to meet in-person with some old friends from the Suricata community that we haven’t seen for more than 2 years. We heard some interesting sessions during the conference and had the opportunity to learn how other companies are using Suricata in their tools. We believe the community is stronger than ever and is going in the right direction. And we gathered many ideas that we plan to explore for the Stamus Security Platform (SSP).  We want to thank those that came to our booth to get a book or say “hi” to our team, those that joined Peter and Eric for their pre-conference training, and those that came to our sessions. We were excited to be back in-person and hope to see you again next year! [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png) ](https://www.facebook.com/share.php?u=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2Fsuricon-2022-for-stamus-networks%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png) ](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2Fsuricon-2022-for-stamus-networks%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528304.fs1.hubspotusercontent-na1.net/hub/7528304/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/twitter-color.png?width=24&name=twitter-color.png) ](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2Fsuricon-2022-for-stamus-networks%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2Fsuricon-2022-for-stamus-networks%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png) ](mailto:?subject=Check+out+https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2Fsuricon-2022-for-stamus-networks%3Futm_medium%3Dsocial%26utm_source%3Demail&body=Check+out+https%3A%2F%2Fwww.stamus-networks.com%2Fblog%2Fsuricon-2022-for-stamus-networks%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Ken Gramley](https://www.stamus-networks.com/hubfs/Stamus_Ken-1.png) #### Ken Gramley Ken is chief executive officer at Stamus Networks. He has over 20 years of experience in building and leading high-tech companies. He has served as a top executive at several technology, network and security organizations, including as CEO of Emerging Threats and co-founder and VP of Engineering at both Covelight Systems and Hatteras Networks. Ken resides in North Carolina, USA. [**](https://www.linkedin.com/in/ken-gramley/) [** ](https://twitter.com/kengramley) ## Schedule a Demo of Clear NDR [![REQUEST A DEMO](https://no-cache.hubspot.com/cta/default/6344338/a3da5fbf-412c-4e3f-a140-f6f33ed8cc5f.png)](https://cta-redirect.hubspot.com/cta/redirect/6344338/a3da5fbf-412c-4e3f-a140-f6f33ed8cc5f) ## Related posts [![Suricata Language Server 2.0 Now Available from Stamus Networks](https://www.stamus-networks.com/hubfs/SN-SLS-2-Blog-Featured.jpg) ](https://www.stamus-networks.com/blog/suricata-language-server-2.0?hsLang=en) ### [Suricata Language Server 2.0: Major Update with Workspace Intelligence](https://www.stamus-networks.com/blog/suricata-language-server-2.0?hsLang=en) We're excited to announce version 2.0 of the Suricata Language Server, featuring workspace-wide... [![Suricata Language Server 1.3.0: Automated PCAP Testing, Multi-Version Support, and Syntax Highlighting](https://www.stamus-networks.com/hubfs/SLS-1.3-18-Dec-2025.jpg) ](https://www.stamus-networks.com/blog/suricata-language-server-1.3-automated-pcap-testing-and-multi-version-support?hsLang=en) ### [Suricata Language Server 1.3.0: Automated PCAP Testing, Multi-Version Support, and Syntax Highlighting](https://www.stamus-networks.com/blog/suricata-language-server-1.3-automated-pcap-testing-and-multi-version-support?hsLang=en) [Suricata Language Server](https://www.stamus-networks.com/suricata-language-server?hsLang=en) 1.3.0 is now available and it surfs on the concept of magic comment... [![](https://www.stamus-networks.com/hubfs/SLS-1.1.0-13-Nov-2025.jpg) ](https://www.stamus-networks.com/blog/suricata-language-server-1.1.0-reduces-installation-requirements-with-docker-container-mode?hsLang=en) ### [Suricata Language Server 1.1.0 Reduces Installation Requirements with Docker Container Mode](https://www.stamus-networks.com/blog/suricata-language-server-1.1.0-reduces-installation-requirements-with-docker-container-mode?hsLang=en) Writing and validating Suricata signatures shouldn't require wrestling with complex installation... [![Stamus-Logo-with-R-white](https://www.stamus-networks.com/hs-fs/hubfs/Stamus-Logo-with-R-white.png?width=2000&height=536&name=Stamus-Logo-with-R-white.png "Stamus-Logo-with-R-white")](https://www.stamus-networks.com/?hsLang=en) ABOUT STAMUS® NETWORKS Stamus Networks is the network intelligence foundation for AI-powered security operations and the creator of the Clear NDR® system. Built on Suricata, the world's leading open-source network security engine, Clear NDR transforms raw network traffic into actionable security insights with unmatched transparency, customization, and effectiveness. Designed to close visibility gaps and reduce alert fatigue, Clear NDR is trusted by leading financial institutions, government agencies, and has been battle-tested over ten years in NATO's largest cybersecurity exercises. Stamus Networks empowers security teams with greater control, fewer false positives, faster response times, and a more responsive, open approach than legacy vendors. - [**](https://www.linkedin.com/company/stamus-networks) - [**](https://twitter.com/StamusN/) - [**](https://www.youtube.com/Stamus-Networks) - [* *](https://discord.gg/JUMSU9uA) - Paris, FranceIndianapolis, USA **[contact@stamus-networks.com](mailto:contact@stamus-networks.com) [Privacy](https://www.stamus-networks.com/privacy-policy?hsLang=en) © 2014-2026 Stamus Networks, Inc. All rights Reserved.