PortscanGeoinfo is a plugin for the powerful Prelude correlation engine. This plugin correlates alerts from Snort NIDS and OSSEC HIDS sensors regarding portscans. Geographical information (GeoIP) is included in the correlated alert.
Features
- GeoIP lookup
- correlation of IDMEF events (prelude-correlator)
- correlation of portscans
Categories
Network MonitoringLicense
GNU General Public License version 2.0 (GPLv2)Follow PortscanGeoinfo
Other Useful Business Software
AI-powered service management for IT and enterprise teams
Give your IT, operations, and business teams the ability to deliver exceptional services—without the complexity. Maximize operational efficiency with refreshingly simple, AI-powered Freshservice.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of PortscanGeoinfo !