​OSSIM事件分类/子类总结表


OSSIM事件类/子类 CATEGORY/ SUBCATEGORY 总结表数据源里可以查看详情,因为类和子类会显示在SIEM中。事件 类/子类数据源分类AccessACL DenyACL PermitConnectionClos免费云主机域名edConnectionOpenedFile AccessFile BlockedFirewall DenyFirewall Misc EventFirewall PermitTimeoutTraffic InboundTraffic OutboundTunnel ClosedTunnel ConnectionWeb Appliation AccessAlarmAttacksBruteforceDosMalwareMiscNetworkPolicyScadaScanAertHostIDS AlertIDS AlertIPS AlertAvailabilityState CriticalState DownState UnknownState UpState WarningDatabaseErrorLoginLogin FailedLogoutQueryStartStopReconMiscScannerApplicationDHCP ErrorDHCP RequestDNS Succesful Zone TranferDNS Zone Transfer FailedFTP commandExecutedFTPConnectionOpenedMail ReceivedMail SentSpam Detected Closed DeniedWeb ErrorWeb DeniedWeb ModifiedWebProxyWeb RedirectedAuthenticationAccount LockoutAdmin AccessBrute forceDefault CredentialsFailedFTP Login FailedFTP Login SucceededGoup AddedGoup DeletedLoginLogoutPassword Change FailedPassword Change SucceededUser ChangedUser CreatedUser DeletedExploitAttack ResponseBuffer OverflowCommand ExecutionCross Site ScriptingDenial Of ServiceDirectory TraversalFile InclusionFormat StringSpoofingShellCodeSQL InjectionMalwareAdwareBackdoorFake AntivirusGenericKeyLoggerSpywareTrojanVirusWormPolicyAnonymityCheck FailedInstant Messaging ChatP2PPhishingPornSuspiciousBad TrafficBlacklist AddressDatabase ActivityDNS Protocol AnomalyFTP Protocol AnomalyHTTP Protocol AnomalyMail Protocol AnomalyNetbios ActivityNetwork AnomalyNFS ActivityRPC ActivityScadaActivitySSH ActivitySSH Protocol AnomalyTelnet Protocol AnomalyThreshold ExceededWeb Attack or ScanInventoryMac ChangeMacDetectedOperating System ChangeOperating System DetectedService ChangeService DetectedServiceMisc

相关推荐: linux中shell的作用是什么

这篇文章主要介绍“linux中shell的作用是什么”,在日常操作中,相信很多人在linux中shell的作用是什么问题上存在疑惑,小编查阅了各式资料,整理出简单好用的操作方法,希望对大家解答”linux中shell的作用是什么”的疑惑有所帮助!接下来,请跟着…

免责声明:本站发布的图片视频文字,以转载和分享为主,文章观点不代表本站立场,本站不承担相关法律责任;如果涉及侵权请联系邮箱:360163164@qq.com举报,并提供相关证据,经查实将立刻删除涉嫌侵权内容。

(0)
打赏 微信扫一扫 微信扫一扫
上一篇 01/25 11:21
下一篇 01/25 11:21