Skip to content

Instantly share code, notes, and snippets.

View ESGuardian's full-sized avatar

ESGuardian

8 followers · 0 following
View GitHub Profile
@ESGuardian
ESGuardian / !ossim_cyrillic_chars.md
Last active August 29, 2015 14:23
OSSIM cyrillic chars

This is the instruction how to make OSSIM properly display Russian text on the screen and when you export to csv. Usefull for ossec-agent on Russian Windows and for database type connectors for MSSQL databases.

And check_encoding.py script. See instruction.txt for details

@ESGuardian
ESGuardian / !ossim_tmg_plugin.md
Last active August 29, 2015 14:23
OSSIM plugin for MS TMG 2010 (Using SNARE Epilog for send FWS and WEB w3c formated logs to syslog)

There are two plugins for parsing FWS and WEB w3c logs from MS TMG 2010 on AlienVaul OSSIM and modified ParserUtil.py

tmg-web plugin and PerserUtil.py modified for add event sid 2 - Exchange ActyveSync Sync command

@ESGuardian
ESGuardian / !ossim_plugin_msfep.md
Last active August 29, 2015 14:23
OSSIM plugin for MS FEP (note about freetds.conf if you are not native american)

This is the plugin for reading MS Endpoint Protection events from System Center Configuration Manager database. Also contains configuration files for creating view in SCCM DB and for Freedts on OSSIM server (need for cyrillic chars in SCCM DB)

@ESGuardian
ESGuardian / !ossim_plugin_myILO.md
Last active July 3, 2019 13:19
OSSIM plugin for HP iLO

This is the plugin for parsing HP iLO v. 4 login/logout events on AlienVault OSSIM

@ESGuardian
ESGuardian / !ossim_plugin_nfotx.md
Last active August 29, 2015 14:23
Python variant of nfotx.pl created by AlienVault community user @packetinspector

This is my variant of nfOTX plugin by @PacketInspector. I rewrote the original nfotx.pl to nfotx.py and added check for my own ip reputation data file.