Input Snort log directly

FujitsuResearch / psykoda

IDS alert screening tool based on semi-supervised anomaly detection and Shapley explanation

MIT License

11 stars 1 forks source link

Open rohori opened 3 years ago

rohori commented 3 years ago

[x] Snort 2 CSV: psykoda.io.reader.snort_csv
- [x] single file with -y (include year in timestamp column) option
- [ ] log rotation
- [ ] year detection
[ ] Snort 2 syslog
[ ] Snort 3 CSV
[ ] Snort 3 syslog