Releasing a new and greatly enhanced version of ArcOSI tonight with the following new features:
Config file support
White listing
http and https proxy support
New feeds
Fixed numerous bugs and finally updated the Windows EXE version!
Snag a copy @ http://code.google.com/p/arcosi
Showing posts with label Information Security. Show all posts
Showing posts with label Information Security. Show all posts
Monday, April 11, 2011
Thursday, August 12, 2010
ArcOSI - ArcSight Open Source Intelligence
Just in time for the ArcSight annual users conference I will be presenting on integrating Open Source Intelligence in ESM and have updated the original malwarefeed.py script with a version which can pull from multiple configurable sources!
If you want to give it a spin on your own environment now, download the python script version below and start streaming thousands of known malicious IP's right into ESM via CEF syslog.
http://code.google.com/p/arcosi/
usage: ./arcosi.py 127.0.0.1
If you want to give it a spin on your own environment now, download the python script version below and start streaming thousands of known malicious IP's right into ESM via CEF syslog.
http://code.google.com/p/arcosi/
usage: ./arcosi.py 127.0.0.1
Subscribe to:
Posts (Atom)