Snort mailing list archives
Re: Good Snort Signatures <-- is all in tuning
From: "Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>
Date: Wed, 25 Aug 2004 09:37:39 +0100
--On 24 August 2004 22:27 -0400 "Keith W. McCammon" <mccammon () gmail com> wrote:
Check out Sourcefire's Defense Center solution. 3D uses their RNA system, which is system- and network-aware to contextualize and prioritize sensor alert data. Note that this is not an auto-tuning IDS, but does use information about your local network, as well as policy-based parameters, to help you "cut to the chase" when dealing with alert data. http://sourcefire.com/products/mgmt.html
...Alternatively, OSSIM <http://www.ossim.net> uses the results of previously-run Nessus scans to boost the priority of alerts that match a vulnerability that was previously found by Nessus.
Best Regards, Alex. -- Alex Butcher: Security & Integrity, Personal Computer Systems Group Information Systems and Computing GPG Key ID: F9B27DC9 GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9 ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort-addon Advice requested, (continued)
- Snort-addon Advice requested Clayton Mascarenhas (Aug 24)
- Re: Snort-addon Advice requested Michael McDonough (Aug 24)
- Good Snort Signatures Adriel T. Desautels (Aug 24)
- Re: Good Snort Signatures sekure (Aug 24)
- Re: Good Snort Signatures Keith W. McCammon (Aug 24)
- Re: Good Snort Signatures Alex Butcher, ISC/ISYS (Aug 25)
- Re: Good Snort Signatures James Riden (Aug 24)
- RE: Good Snort Signatures Patrick S. Harper (Aug 24)
- RE: Good Snort Signatures <-- is all in tuning Adriel T. Desautels (Aug 24)
- Re: Good Snort Signatures <-- is all in tuning Keith W. McCammon (Aug 24)
- Re: Good Snort Signatures <-- is all in tuning Alex Butcher, ISC/ISYS (Aug 25)
- RE: Good Snort Signatures <-- is all in tuning Josh Berry (Aug 25)
- Re: ClamAV preprocessor William Metcalf (Aug 27)