ACARM-ng

ACARM-ng is an alert correlation software which can significantly facilitate analyses of a traffic in computer networks. It is responsible for collection and correlation alerts sent by network and host sensors also referred to as NIDS and HIDS respectively. Correlation process aims to reduce the total number of messages that need to be viewed by a system administrator to as few as possible by merging similar events into groups representing logical pieces of malicious activity.