#days 2012: Four Flynn: Why your intrusion detection system sucks and what to do about it
▶#days 2012: Four Flynn: Why your intrusion detection system sucks and what to do about it — a 2012 DEFCON Switzerland security conference talk on blue-team (35:36 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube