Documentation
Technical Documentation
Installation Guide
User Manual (PDF – 22MB)
On-line User Guide
How to Guides
Update Procedure
Backup and Restore Procedure
Setup WIDS (Wireless IDS)
Use Nessus instead of OpenVas
System Description
AlienVault Unified Security Management Platform (AV-USM™) System Description
Technical Description
Management Server
Sensor
Configuration
Integrated Tools
Collection
Building Collector Plugins
Data Source Collection Plugin List
Integration of 3rd party tools/devices
Snare EventLog Agent for Windows
WMI Event Log collection (Windows – Agentless)
WMI Event Log collection (Windows Server 2008 – Agentless)
Checkpoint Fw1 (Fw1Loggrabber)
Correlation
Writing Correlation Directives
Correlation engine explained (RPC DCOM)
Correlation engine explained (Worm example)
Development
Next Steps
- Call Us: 1 (855) 4 ALIENS
-
"The AlienVault platform is very powerful and flexible. We were able to deploy quickly and immediately see improved results."– Javier Diaz Evans, Director of Information Security, AToda Hora
- "Another advantage that AlienVault offers is the ability to develop your own plugins without the need for intervention by the company."
– Colonel Jesús M. González Pérez, Army Head of Cyber Defence, Ministry of Defence, Spain
- "OSSIM… is a popular choice among the open source community. It offers many of the features of proprietary solutions without the high cost and licensing fees."
– Justin Crist, SANS Insitute
- "Meet AlienVault OSSIM, a complex security system designed to make your life simpler."
– Jeramiah Bowling, Linux Journal