[Prelude Hybrid IDS] #260: IDMEF XML View in Prewikka
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#260: IDMEF XML View in Prewikka
-------------------------+--------------------------------------------------
Reporter: bjou | Owner: yoann
Type: enhancement | Status: new
Priority: normal | Milestone:
Component: prewikka | Version: 0.9
Severity: normal | Keywords:
-------------------------+--------------------------------------------------
Hey there,
I would suggest the following feature for prewikka: In the detailed alert
view
/?view=alert_summary&origin=alert_listing&messageid=$alert.messageid
there should be the possibility to view this event in pure IDMEF XML, too.
This would make it easier to get an IDMEF overview and indepth view, as
well as it makes it easier to create rules/filters on IDMEF criteria, i.e.
if using the smtp plugin or just some other custom filters
--
Ticket URL: <https://trac.prelude-ids.org/ticket/260>
Prelude Hybrid IDS <http://www.prelude-ids.org>
The Prelude Hybrid Intrusion Detection System suite
_______________________________________________
Prelude-devel site list
[email protected]
http://www.prelude-ids.org/mailman/listinfo/prelude-devel