This is cache of http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/217493370/tips-for-correlation-on-budget.html. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.
Tips for Correlation On a Budget
2008-01-15 23:16:00 by Dr Anton Chuvakin in Anton Chuvakin Blog -
 
Even though I hated the reference to "... log management and its wiser, old brother, event correlation", this paper is a neat guide to "Event Correlation on a Budget." Correlation nowadays is nowhere near as mysterious as back in 2002 :-)

On the other hand, I am pretty shocked that the author missed OSSIM tool, which has more features compared to others mentioned.
 
 
 
 
 
 
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia