Suricata - Intrusion detection system - to detect few basics attacks

So what i need is: To set up 2 VMs (preferably under VMWare Workstation or Oracle Virtual Box) Machines: 1st. Kali attack Box 2nd. Intentionally vulnerable machine (on ubuntu 20.04) and with Suricata IDS installed and configured to detect attacks. and some tool for visualisation like ELK stack to visualise alerts from Suricata. Whats more i need this machine to have intentionally vulnerable services like old SSH etc. These 2 hosts needs to be discoverable by each other but not visible from outside. And Use 1st machine to attack 2nd one, On 2nd machine i need to discover those attacks, and show how and why Surricata did or did not discovered them I would like those attacks to be rather basic ones like: 0. NMAP scan 1. SSH Bruteforcing 2. SSH that suffer from known payload attack that Suricata can discover Other attacks? - Your suggestions here: 3. 4. 5. 6. 7. 8. I need like 5-8 attacks to be discovered by Suricata, I need all the setup and configuration to be documented step by step on how it is configured in document, to make it easy to repeat all of steps taken to setup and configure those machines and attack needs to be explained as well. (we can skip installation of both systems - but network configuration ll be nice to explain as well)