sagan
PPA description
Sagan is a multi-threaded, real time system- and event-log monitoring system, but with a twist. Sagan uses a “Snort” like rule set for detecting malicious events happening on your network and/or computer systems.
If Sagan detects a potentially bad event, that event can be stored to a Snort database (MySQL/PostgreSQL), send it to a SIEM tool like Prelude, or send an email. Sagan is meant to be used in a ‘centralized’ logging environment, but will work fine as part of a standalone Host IDS system for workstations.
http://sagan.quadrantsec.com/
Adding this PPA to your system
This PPA does not contain any packages yet. Find more information about how to upload packages in the PPA help page.
PPA statistics
- Activity
- 0 updates added during the past month.