Support #2065
closed
Correlation engine tool for Suricata
Added by Alexis Fredes about 7 years ago.
Updated about 7 years ago.
Description
Hello!
I am looking for a correlation engine tool to correlate the events of Suricata. I found Aanval, but I want to know if there is an alternative to it.
- Status changed from New to Closed
Alexis Fredes wrote:
Hello!
I am looking for a correlation engine tool to correlate the events of Suricata. I found Aanval, but I want to know if there is an alternative to it.
Aanval may be one, also search for Suricata and the ELK stack as a way to build your own.
For correlation you need to decide what you want to correlate against. So you want to correlate Suricata events against X. Look for a tool that can handle X as well.
Closing as this is more suitable for the mailing list.
Also available in: Atom
PDF