Host-based intrusion detection system comparison: Difference between revisions

Revision as of 16:10, 19 April 2017

Revision as of 16:13, 19 April 2017

Line 16:

! Network

! Logs

|! [[Information_technology_security_audit|AuditingConfig]]

! Notes

|-

Line 22 ⟶ 23:

| {{no}}

| {{no}}

| {{yes}}

| {{yes}}

| {{yes}}

Line 34 ⟶ 36:

| {{no}}

| {{no}}

| {{yes}}

| [[Information_technology_security_audit|Auditing]]

|

|-

| [[OpenVAS]]

Line 43 ⟶ 46:

| {{no}}

| {{no}}

| {{yes}}

| Auditing

|

|-

| [[Samhain_(software)|Samhain]]

Line 52 ⟶ 56:

| {{no}}

| {{partial}}<ref>Last</ref>

|

|

|-

Line 61 ⟶ 66:

| {{yes}}

| {{no}}

|

|

|-

Line 70 ⟶ 76:

| {{no}}

| {{partial}}<ref>lastlog, wtmp, utmp, wtmpx</ref>

|

|

|-

Line 79 ⟶ 86:

| {{no}}

| {{no}}

| {{yes}}

|

|-

Line 88 ⟶ 96:

| {{no}}

| {{no}}

|

| proc ps compare

|-

Line 97 ⟶ 106:

| {{yes}}

| {{no}}

|

|

|-

Line 106 ⟶ 116:

| {{no}}

| {{yes}}

|

|

|-

Line 115 ⟶ 126:

| {{no}}

| {{yes}}

|

|

|-

Line 124 ⟶ 136:

| {{no}}

| {{no}}

|

|

|-

Line 133 ⟶ 146:

| {{no}}

| {{no}}

|

|

|-