Skip to content
This repository has been archived by the owner on Apr 26, 2019. It is now read-only.

timbrigham/OSSIM-HP-Switch

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commits
 
 
 
 
 
 

Repository files navigation

This package provides an updated version of the 'HP-Switch' syslog processing package originally created by Jason Hill of Sword & Shield Enterprise Security.

Changes made include the following:

  • Plugin ID values. Anything under the OSSIM-Correlators packages have IDs in the 10,000-11,000 range, to avoid collisions with other custom user packages.
  • The format of several of the regular expressions, notably for 0001-HP-Login.
  • Additional field extractions for easier correlations. :)

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published