Even though I hated the reference to "... log management and its wiser, old brother, event correlation", this paper is a neat guide to "Event Correlation on a Budget." Correlation nowadays is nowhere near as mysterious as back in 2002 :-)
On the other hand, I am pretty shocked that the author missed OSSIM tool, which has more features compared to others mentioned.
No comments:
Post a Comment