[ Bron: sagan-rules ]
Pakket: sagan-rules (1:20170725-1.1)
Verwijzigingen voor sagan-rules
Trisquel bronnen:
Het bronpakket sagan-rules downloaden:
- [sagan-rules_20170725-1.1.dsc]
- [sagan-rules_20170725.orig.tar.gz]
- [sagan-rules_20170725-1.1.debian.tar.xz]
Beheerder:
Original Maintainer:
- Pierre Chifflier
Externe bronnen:
- Homepage [quadrantsec.com]
Vergelijkbare pakketten:
Real-time System & Event Log Monitoring System [rules]
Sagan is a multi-threaded, real time system- and event-log monitoring system, but with a twist. Sagan uses a “Snort” like rule set for detecting malicious events happening on your network and/or computer systems. If Sagan detects a potentially bad event, that event can be stored to a Snort database (MySQL/PostgreSQL), send it to a SIEM tool like Prelude, or send an email.
This package provides the rules for Sagan.