IDS mailing list archives
AW: Correlation software
From: sendsec () gmx net
Date: Tue, 23 Mar 2004 08:01:54 +0100 (MET)
We set up a project called Threatman which should do exactly what you want but it's currently still in a planning/prototyping phase. You can find it at http://sourceforge.net/projects/threatman. Anyone willing to contribute or participate is greatly invited ;) Regards, Sandro
Is anyone aware of any open source (free..) event correlation packages, or an initiative to develop such a beast? When looking at commercial solutions I was able to work with ArcSight and found their solution impressive. -Joe
-- +++ NEU bei GMX und erstmalig in Deutschland: TÜV-geprüfter Virenschutz +++ 100% Virenerkennung nach Wildlist. Infos: http://www.gmx.net/virenschutz --------------------------------------------------------------------------- ---------------------------------------------------------------------------
Current thread:
- AW: Correlation software sendsec (Mar 23)