Using Host Attribute Tables
Submitted by rwagner on Thu, 11/06/2008 - 11:30.
11/21/2008 - 17:30
11/21/2008 - 19:00
Etc/GMT-5
The new Snort Caledars are here. Get one free at November's meeting!
Nick Moore will present to ChiSUG on November 21st, 2008,
Date & Time:
Friday, November 21st, 2008, 5:30pm-7:00pm
Meeting Location:
TransUnion, LLC
555 W Adams
Chicago, Illinois 60661
Presenter:
Nick Moore, Sr. Systems Engineer, Sourcefire
Topic: Using Host Attribute Tables
Host Attributes are a powerful, but often overlooked function in Snort. You can add notes to a host profile, set the business criticality, or provide any other information that you choose.
You can use host attributes in host profile qualifications, which constrain the data you collect while building a traffic profile, and also can limit the conditions under which you want to trigger a compliance rule.
