Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Importing Security Product Output Into A Database

from [Ken Swain] Network Security [Permanent Link]
Subject: Re: Importing Security Product Output Into A Database
Date: Tue, 29 May 2007 18:27:57 -0500
Any SIM tool can do this. You can write queries to find anything you are looking for. Some of the information can leveraged automatically to alert and draw your attention to spacific incidents.

Cheers


On May 29, 2007, at 3:21 PM, Daniel Miessler wrote:

Greetings,

I'm wondering if anyone here knows of a product -- commercial or otherwise -- that is able to parse output from various tools, such as Foundscan, Nessus, Nmap, WebInspect, etc. and pull them into a single database format.

Such a tool seems easy enough in concept -- i.e. outputting into XML from the various tools and then mapping the XML schema from each into the central DB schema. But as easy as it is/sounds -- it's a lot of work doing that mapping.

I'd be interested in hearing about anything along these lines that you guys know of and/or related thoughts on creating a queryable database of security information based on the input from the security tools.

Thanks,

--
Daniel Miessler
E: daniel@dmiessler.com
W: http://dmiessler.com
G: 0xDA6D50EAC



[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: Monitoring DB Admin, Ackley, Alex
Next by Date:  Re: Private IP address with yahoo messenger, Alcides
Previous by Thread:  Importing Security Product Output Into A Database, Daniel Miessler
Next by Thread:  Re: Importing Security Product Output Into A Database, Florencio Cano
Indexes:  [Date] [Thread] [Top] [All Lists]