Jump to content

Aanval

From Wikipedia, the free encyclopedia
Aanval
Original author(s)Loyal Moses
Developer(s)Tactical FLEX, Inc.
Stable release
8.0 [1]
Written in
Operating system
TypeSIEM
Websitewww.aanval.com

Aanval is a commercial SIEM product designed specifically for use with Snort, Suricata, and Syslog data.[2] Aanval has been in active development since 2003 and remains one of the longest running Snort capable SIEM products in the industry. [citation needed] Aanval is Dutch for "attack".[3]

History

[edit]

Aanval was created by Loyal Moses in 2003 but was not publicly made available until March 2004 where it was released under the private commercial license C1-RA1008.[4] Throughout the lifecycle of the software it has also been referred to as OpenAanval [5] or ComAanval in addition to Aanval.

Aanval's had provided AJAX style security event monitoring and reporting from a web-browser. Since Aanval's creation, it has developed into an intrusion detection, correlation and threat management console with a specific focus on normalizing Snort, Suricata, and Syslog data. [citation needed]

Several information security related books have been published that include details and references to Aanval, including "Linux Server Security, Second Edition"[6] by O'Reilly Media, "Security Log Management"[7] by O'Reilly Media, "Snort: IDS and IPS Toolkit"[8] by O'Reilly Media and in 2010 "Unix and Linux System Administration Handbook, Fourth Edition"[9] by O'Reilly Media.

See also

[edit]

References

[edit]
  1. ^ Aanval - Download Archived December 7, 2015, at the Wayback Machine
  2. ^ Aanval - Snort & Syslog Intrusion Detection, Correlation and Threat Management
  3. ^ aanval – Wiktionary
  4. ^ "Aanval End-User License Agreement (EULA)". Archived from the original on 2011-03-14. Retrieved 2011-07-27.
  5. ^ "openaanval-1.48-stable.tar.gz ≈ Packet Storm". packetstormsecurity.com. Retrieved 2020-05-03.
  6. ^ Linux Server Security, Second Edition: Safari Books Online
  7. ^ Security Log Management: Safari Books Online
  8. ^ Snort: IDS and IPS Toolkit: Safari Books Online
  9. ^ Unix and Linux System Administration Handbook, Fourth Edition: Safari Books Online
[edit]