The quidscor ebuild is now propagated on the gentoo portage servers.
If you are a Gentoo linux user, you can install quidscor simply by doing:
ACCEPT_KEYWORDS="~x86" emerge quidscor
Enjoy
Laurent
The second public release of QuIDScor, v1.2.48
has been released today Oct 9th 2003 !
It provides much improved correlation logic and new features improving performance and allowing custom mappings. New features include:
- validation of alerts into three categories (validated, unknown, invalidated)
- uses information about services and applications
- custom mapping file for ID, service and application mappings
- offline processing of Snort-fastlogs
- reprocessing of QuIDScor-logs
- separated correlation process and communication to QualysGuard... read more
The upcoming QuIDScor-1.2 will provide much improved correlation logic and new features improving performance and allowing custom mappings.
New features:
- validation of alerts into three categories (validated, unknown, invalidated)
- uses information about services and applications
- custom mapping file for ID, service and application mappings
- offline processing of Snort-fastlogs
- reprocessing of QuIDScor-logs
- separated correlation process and communication to QualysGuard... read more
We will have a great new release of QuIDScor soon (early October most likely).
It will include major improvements to the correlation algorithm.
If you would be interested in testing a pre-release, please contact <integration@qualysNOSPAM.com>
(remove the NOSPAM).
Stay tuned!
Laurent
Please download the first public source release of QuIDScor !
See also the brand new home page
http://quidscor.sourceforge.net/
(And check out the FAQ link there)
It's official ! The first release will be
at the end of July 2003 with a BSD style
license (allowing you to create commercial
derived products if you wish) !
If you want to preview it, please contact
<integration@qualysNOSPAM.com>
(remove the NOSPAM)
Stay tuned!
Laurent
Welcome to QuIDScor.
Please see the FAQ:
http://quidscor.sourceforge.net/FAQ.html