RE: MBSA Results into DB OR Alternative?

["Murat" <m.korkmaz () determina com>]

You might want to check out SIM (security incident management) products,
like, ArcSight, NetForensics, Intellitactics, e-Securityonline, Tenable
Security and so on.

They all have built in support for different security products to
aggregate, consolidate, normalize and correlate the security events.

 

-----Original Message-----
From: O'dorisio, Steve [mailto:Steven.Odorisio () mms gov] 
Sent: Thursday, October 21, 2004 7:27 AM
To: 'security-basics () securityfocus com'
Subject: MBSA Results into DB OR Alternative?

Hello, 
We are consolidating our operational security data storage, and would
like
to combine the various sources of data (Nessus, MBSA, logs, etc.) into
ONE
location. 

1) Does anyone know how to upload/import MBSA results into a SQL
Server/MS
Access DB?  [All attempts so far have been pretty messy]

OR

2) Does anyone have any suggested commercial off-the-shelf or opens
source
data repository systems that will allow this type of data aggregation?

In the end, we want to have a full, holistic view of the security events
across platforms and systems AND the ability to assign/track the
remediation
of issues.

Any help is much appreciated.

Thanks,
Steve O.