[Security] [Utility] Sagan - a real time log monitoring system.

-
Another security utility for you. Softwink announces the release of Sagan, a real time log monitoring system.

Sagan is a multi-threaded, real time system and event log monitoring system, but with a twist. Sagan uses a "Snort" like rule set for detecting bad things happening on your network and/or computer systems. If Sagan detects a "bad thing" happening, that event can be stored to a Snort database (MySQL/PostgreSQL) and Sagan will attempt to correlate the event with your Snort Intrusion Detection/Intrusion Prevention (IDS/IPS) system.

  • Sagan is fast - Sagan is written in C and is a multi-threaded application. Sagan is threaded to prevent blocking Input/Output (I/O). For example, data processing doesn't stop when an SQL query is needed.
  • Sagan uses a "Snort" like rule set - If you're a user of "Snort" and understand Snort rule sets, then you already understand Sagan rule sets. Essentially, Sagan is compatible with Snort rule management utilities. For example, "oinkmaster" and "pulledpork".
  • Sagan can log to Snort databases - Sagan will operate as a separate "sensor" ID to a Snort database. This means, your IDS/IPS events from Snort will remain separate from your Sagan (syslog/event log). Since Sagan can utilize Snort databases, using Snort front-ends like BASE and Snorby will not only work with your IDS/IPS event, but also with your syslog/events as well!
  • Sagan output formats - You don't have to be a Snort user to use Sagan. Sagan supports multiple output formats, such as a standard output file log format (similar to Snort), e-mailing of alerts (via libesmtp), Logzilla support and external based programs that you can develop using the language you prefer (Perl/Python/C/etc).
  • Sagan is actively developed - Softwink, Inc. actively develops and maintains the Sagan source code and rule sets. Softwink, Inc. uses Sagan to monitor security related log events on a 24/7 basis.
Visit the page: Sagan official page

Comments

Post a Comment

Popular posts from this blog

[Joke] Password selection rules

-
Image
Another joke from lolisoft today...   CORPORATE DIRECTIVE NUMBER 88-570471 In order to increase the security of all company computing facilities, and to avoid the possibility of unauthorized use of these facilities, new rules are being put into effect concerning the selection of passwords. All users of computing facilities are instructed to change their passwords to conform to these rules immediately. RULES FOR THE SELECTION OF PASSWORDS: 1. A password must be at least six characters long, and must not contain two occurrences of a character in a row, or a sequence of two or more characters from the alphabet in forward or reverse order. Example: HGQQXP is an invalid password. GFEDCB is an invalid password. 2. A password may not contain two or more letters in the same position as any previous password. Example: If a previous password was GKPWTZ, then NRPWHS would be invalid because PW occurs in the same position in both passwords. 3. A password may not contain the name of a
Read more

Get it better with disk defragmenter

-
Image
If you have managed your system with file manager , you can go further with "real file manager on hard drive".  Disk Defragmenter is a computer program included in Microsoft Windows designed to increase access speed by rearranging files stored on a disk to occupy contiguous storage locations, a technique commonly known as defragmenting. The purpose is to optimize the time it takes to read and write files to/from the disk by minimizing head travel time and maximizing the transfer rate. As of Windows XP, Disk Defragmenter is also used to improve system startup times.  Two softwares are recommended for this purpose: Auslogics Disk Defrag and MyDefrag .  Auslogics Disk Defrag is a compact and fast defragmenter that supports both FAT 16/32, and NTFS file systems. It is supplied with advanced optimization techniques, which will remedy your system sluggishness and crashes caused by files fragmentation. There are 7 advantages in using Auslogic Disk Defrag as mentioned on its we
Read more

[NEWS] Google’s ‘Soli’ Radar-Based Motion Sensor - Approved by FCC

-
Image
It's time for some good news .. Let's imagine being able to control gadgets with simple hand signals. Google needs to make this idea a reality with its 'Soli' radar-based movement sensor innovation.    According to the FCC, Google’s Soli motion sensor, “will serve the public interest by providing for innovative device control features using touchless hand gesture technology.” As per the FCC, Google's Soli movement sensor, "will serve the general population enthusiasm by accommodating imaginative gadget control highlights utilizing touchless hand motion innovation."  Soli, a detecting innovation that utilizes a small radar to identify touchless motion connections, was created by Google to enhance savvy gadget use. As indicated by Soli's site, the Soli movement sensor works by producing electromagnetic waves in a wide bar and following unique motions communicated by hand and finger movements. The sensor can be inserted into PCs, wearables, a
Read more