|
|
Sponsored Content
Special Forums
News, Links, Events and Announcements
Software Releases - RSS News
OSSEC HIDS 2.0 (Default branch)
Post 302293742 by Linux Bot on Tuesday 3rd of March 2009 05:50:05 PM
03-03-2009
OSSEC HIDS 2.0 (Default branch)
OSSEC HIDS is a host-based intrusion detection system. It performs log analysis, integrity checking, rootkit detection, time-based alerting, and active response. License: GNU General Public License v3 Changes:
This version comes with numerous new features, including support for compiled (C-based) rules, new reporting tools, and agentless monitoring to allow file integrity checking on network devices (including firewalls, routers, etc). It also comes with support for new log formats, including Checkpoint logs, Yum, and a few more.
More...
This version comes with numerous new features, including support for compiled (C-based) rules, new reporting tools, and agentless monitoring to allow file integrity checking on network devices (including firewalls, routers, etc). It also comes with support for new log formats, including Checkpoint logs, Yum, and a few more.
More...
This User Gave Thanks to Linux Bot For This Post:
|
|
2 More Discussions You Might Find Interesting
1. Cybersecurity
I am newbee to OSSEC. My objective is to install OSSEC in a ubuntu 10.04 server, configure it and then install rootkits, tamper files and then scan for possible notification and alerts.
BUT I tired and then changed few setting in ossec.conf but its nearly similar to default setting.
After... (1 Reply)
Discussion started by: metalaarif
1 Replies
2. Red Hat
FYI...
Installed OSSEC server version 2.6 in Cent OS 6.2 and agents are web servers
installed in chroot environment.
Moreover ossec server and apache (web servers are agents) are installed in separate machines.
In ossec.conf file, added below configuration in both server and agent. ... (0 Replies)
Discussion started by: vamsi_k
0 Replies
LEARN ABOUT DEBIAN
snort2dlf
SNORT2DLF.IN(1) LogReport's Lire Documentation SNORT2DLF.IN(1) NAME
snort2dlf - convert Snort logs to firewall DLF SYNOPSIS
snort2dlf DESCRIPTION
snort2dlf converts Snort logs into firewall DLF format. Input for this converter is the standard snort logfile. EXAMPLES
To process a log as produced by snort: $ snort2dlf < snort.log snort2dlf will be rarely used on its own, but is more likely called by lr_log2report: $ lr_log2report snort < snort.log SEE ALSO
The Snort project website at http://www.snort.org/ . AUTHOR
Torsten Fellhauer <torsten@fellhauer-web.de> . Code based upon ipchains2dlf code by Francis J. Lacoste. VERSION
$Id: snort2dlf.in,v 1.7 2006/07/23 13:16:35 vanbaal Exp $ COPYRIGHT
Copyright (C) 2003 Torsten Fellhauer This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with http://www.gnu.org/copyleft/gpl.html. Lire 2.1.1 2006-07-23 SNORT2DLF.IN(1)