Sguil 0.7 released
Last week Bamm has made Sguil version 0.7.0 final and released it on Sguil website.
Big changes areĀ separationĀ of agents, (resp. snort_agent, pcap_agent and sancp_agent), added Passive Asset Detection System (PADS) agent and a lot of bug fixes.
For those who aren't familiar with Sguil, check the Sguil website or the overview on Sguil Wiki page.
When I can find the time, I will post my article about 'Network Security Monitoring in a multi tiered environment'.

Leave a comment