Project

General

Profile

Actions
Copy link

Support #2065

closed

Correlation engine tool for Suricata

Added by Alexis Fredes about 7 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
Label:

Description

Hello!
I am looking for a correlation engine tool to correlate the events of Suricata. I found Aanval, but I want to know if there is an alternative to it.

Actions
Copy link
 #1

Updated by Jason Ish about 7 years ago

  • Status changed from New to Closed

Alexis Fredes wrote:

Hello!
I am looking for a correlation engine tool to correlate the events of Suricata. I found Aanval, but I want to know if there is an alternative to it.

Aanval may be one, also search for Suricata and the ELK stack as a way to build your own.

For correlation you need to decide what you want to correlate against. So you want to correlate Suricata events against X. Look for a tool that can handle X as well.

Closing as this is more suitable for the mailing list.

Actions
Copy link

Also available in: Atom PDF