Using Host Attribute Tables

11/21/2008 - 17:30
11/21/2008 - 19:00
Etc/GMT-5

The new Snort Caledars are here. Get one free at November's meeting!

Nick Moore will present to ChiSUG on November 21st, 2008,

Date & Time:
Friday, November 21st, 2008, 5:30pm-7:00pm

Meeting Location:
TransUnion, LLC
555 W Adams
Chicago, Illinois 60661

Presenter:
Nick Moore, Sr. Systems Engineer, Sourcefire

Topic: Using Host Attribute Tables

Host Attributes are a powerful, but often overlooked function in Snort. You can add notes to a host profile, set the business criticality, or provide any other information that you choose.

You can use host attributes in host profile qualifications, which constrain the data you collect while building a traffic profile, and also can limit the conditions under which you want to trigger a compliance rule.