Matches in DBpedia 2014 for { ?s ?p Sguil (pronounced sgweel or squeal) is a collection of Free software components for Network Security Monitoring (NSM) and event driven analysis of IDS alerts. The sguil client is written in Tcl/Tk and can be run on any operating system that supports Tcl/Tk. Sguil integrates alert data from Snort, session data from SANCP, and full content data from a second instance of Snort running in packet logger mode.Sguil is an implementation of a Network Security Monitoring (NSM) system. NSM is defined as "collection, analysis, and escalation of indications and warnings to detect and respond to intrusions."What makes this particularly interesting is that this is basically a suite of tools which one can use as the foundation of an organization's Security Operations Center (SOC).. }
Showing items 1 to 1 of
1
with 100 items per page.
- Sguil abstract "Sguil (pronounced sgweel or squeal) is a collection of Free software components for Network Security Monitoring (NSM) and event driven analysis of IDS alerts. The sguil client is written in Tcl/Tk and can be run on any operating system that supports Tcl/Tk. Sguil integrates alert data from Snort, session data from SANCP, and full content data from a second instance of Snort running in packet logger mode.Sguil is an implementation of a Network Security Monitoring (NSM) system. NSM is defined as "collection, analysis, and escalation of indications and warnings to detect and respond to intrusions."What makes this particularly interesting is that this is basically a suite of tools which one can use as the foundation of an organization's Security Operations Center (SOC).".