News for hackers. Stuff that matters.

A comment on Introducing FIDO: Automated Security Incident Response. Parent comment

Re:Introducing FIDO: Automated Security Incident Response by freehunter on Monday May 04, 2015 @05:33PM (#9489364)
It doesn't seem like it replaces Snort, which is an intrusion prevention system. It's more akin to AlienVault, which is a SIEM. Netflix shies away from the term SIEM. They call this an incident response software. I'm reading through it trying to figure out how it's different from a SIEM, but there's not a lot of technical details.
[ Parent | on HN ]
Re:Introducing FIDO: Automated Security Incident Response by thieving_magpie on Monday May 04, 2015 @07:24PM (#9489898)
So akin to snorby mixed with Ossec active-response? Should be interesting to see if this gets picked up in an OS like Security Onion.

Also, it appears to use snort.

[ Parent | on HN ]