SecurityOnline: maltrail v0.60 releases: Malicious traffic detection system https://securityonline.info/maltrail-malicious-traffic-detection-system/ #MalwareAnalysis #Forensics #maltrail

I'm looking for #OSSec guidance, I remember when #tripwire was suggested for detecting #rootkits, but there's so many options, with #Zeek and #Maltrail. #HIDS #IntrusionDetection

I thought OSSEC with the GUI looked nice, especially if there was a central monitoring server that agents could report to. Zeek looks more like that but looks like it may have to sit at the router, which is annoying, and doesn't detect rootkits at all. My end goal is preventing SIP phone fraud.

https://linuxsecurity.expert/tools/samhain/alternatives/