sagan-rules
Real-time System & Event Log Monitoring System [rules]
Description
Sagan is a multi-threaded, real time system- and event-log monitoring system, but with a twist. Sagan uses a “Snort” like rule set for detecting malicious events happening on your network and/or computer systems. If Sagan detects a potentially bad event, that event can be stored to a Snort database (MySQL/PostgreSQL), send it to a SIEM tool like Prelude, or send an email. This package provides the rules for Sagan.Upload more screenshots
Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.
Upload a screenshotHint: upload an image here from your clipboard with Ctrl-V
Homepage
https://quadrantsec.com/sagan_log_analysis_engine/
Install this software package
If the package is available for the distribution you are currently using on your computer then install the software by clicking on…
Install sagan-rules