AlienVault OSSIM vs USM: A Comparison of Open Source vs Commercial
OSSIM, AlienVault’s Open Source Security Information and Event Management (SIEM) product, provides a feature-rich open source SIEM complete with event collection, normalization and correlation. For more advanced functionality, AlienVault’s USM platform builds on OSSIM with these additional capabilities:
- Log management
- Advanced threat detection with 2000+ built-in correlation rules
- Actionable threat intelligence from AlienVault Labs, updated weekly to keep up with the latest threats
- 150+ compliance & threat reports to give you the information you need for auditors and senior management
- Support for PCI, HIPAA, GPG13, & SOX compliance requirements
Get your copy: https://www.alienvault.com/resource-center/white-papers/ossim-vs-usm
When did you start requiring an email after SW sends an alert?
I received an alert in my SW console and clicked on it. In the past that would have opened a page with some details about what had happened. Instead, I got this:

Why the change?
-
Oct 28, 2016 at 3:31 UTC
Some clients we had, had communication with some Godaddy servers that were blacklisted and we would get an alert.I guess I haven't received an alert in quite a while.
-
Oct 28, 2016 at 3:58 UTCYah, we changed this about a year ago? You should only ever have to enter your email one time, if you are using same browser with cookies.
Defend Against DDoS and Botnet Attacks: How To
Many organizations felt the impact of last week's massive internet disruption, caused by a DDoS attack against DNS provider Dyn. It appears the DDoS attack was launched with the Mirai botnet, which leverages IoT devices.
You can learn more about this specific attack on the AlienVault blog:
We also wanted to provide Spiceheads with the two resources below which offer a basic overview of these types of attacks and how to defend against them.-
Nov 4, 2016 at 2:38 UTCFYI, the page seems to be having some trouble. I'm sure i'll get the content in email as well though.

-
Nov 7, 2016 at 10:00 UTC
Thanks for the heads up! Appears to be working now... Sort of ironic of course, given my original post ;)FYI, the page seems to be having some trouble. I'm sure i'll get the content in email as well though.





















