0xrajneesh/Suricata-IDS-Home-Lab ? reverse-engineered prompt

Build me a polished home lab guide for setting up Suricata as a network intrusion detection system.

I want a clear step by step walkthrough that helps someone import the Ubuntu Server 22.04 IDS machine in VirtualBox, set up the victim machines, and get Suricata monitoring traffic between a Windows victim and a Kali attacker. Please include simple setup instructions for DVWA, Metasploitable 2, and Typhoon, then show how to add and test Suricata rules for common Nmap scans, Metasploit activity, and web attacks like command injection, directory traversal, XSS, SQL injection, and file inclusion.

Make it easy to follow for someone doing this as a first home lab, with practical examples, expected alerts, and a short section on how to verify the rules are working. If anything needs current references or best practice details, look them up online and keep the guide beginner friendly.