Host-based intrusion detection system comparison: Difference between revisions

Revision as of 19:03, 19 April 2017

Revision as of 17:10, 20 April 2017

Line 13:

! Logs

! [[Information_technology_security_audit|Config]]

! Sane defaults

! Notes

|-

Line 23 ⟶ 24:

| {{yes}}

| {{yes}}

|

|

|-

Line 33 ⟶ 35:

| {{no}}

| {{yes}}

| {{yes}}

| Compliance testing only testing only in the commercial version

|-

| [[OpenVAS]]

Line 44 ⟶ 47:

| {{yes}}

|

|

|-

| [[Samhain_(software)|Samhain]]

Line 53 ⟶ 57:

| {{partial}}<ref>Last</ref>

|

| {{no}}

|

|-

Line 63 ⟶ 68:

| {{no}}

|

|

|

|-

Line 73 ⟶ 79:

| {{partial}}<ref>lastlog, wtmp, utmp, wtmpx</ref>

|

|

|

|-

Line 82 ⟶ 89:

| {{no}}

| {{no}}

| {{yes}}

| {{yes}}

|

Line 93 ⟶ 101:

| {{no}}

|

|

| proc ps compare

|-

Line 103 ⟶ 112:

| {{no}}

|

|

|

|-

Line 113 ⟶ 123:

| {{yes}}

|

| {{no}}

|

|-

Line 123 ⟶ 134:

| {{yes}}

|

|

|

|-

Line 133 ⟶ 145:

| {{no}}

|

| {{no}}

|

|-

Line 143 ⟶ 156:

| {{no}}

|

|

|

|-