Champ Clark
Champ Clark
Hello, First off I love this map. It's a nice KISS (Keep It Simple Stupid) approach which I've been looking for. Thank you for developing it. I've been able to...
** Please note ** This repo has moved! Please use https://github.com/quadrantsec/sagan . Please post feature requests and bug reports there. Thank you!
From Steve: "Create flowbits based on anything found in a log. For instance, pull a username from a log and create a flowbit named the same as the username (user...
Sagan doesn't dump stats on -USR1 or shutdown (when in initab)
Write "stat" data out to json, similar to how Suricata does it.
**Describe the bug** libpcre faults when dealing with certain types of expressions. For example: pcre: "/^((?!Account Name: (.*)\$ ).)*$/"; Will work fine with smaller strings, but fault on large input....
It would be nice to supply a pre-populated list to monitor for client tracking. For example, a list of domain controllers that get monitored for logs (rather than eveyrthing).
Sanity checking on 'var' used between sagan.conf and Sagan rules leave something to be desired. For example, if 'var SAGAN_DAYS 012345' is NOT loaded, but specified in a rule, there...
Hello! I've had Yubikey 1.0.4 / 1.0.5 installed and working for some time. It's been awesome! I wanted to update to 1.1.0 to take advantage of some new features. When...