OSSIM事件類/子類 CATEGORY/ SUBCATEGORY 總結表
在數據源里可以查看詳情，因為類和子類會顯示在SIEM中。
事件 類/子類
數據源分類 | 子類 | 備注 |
Access | ACL Deny | |
ACL Permit | ||
ConnectionClosed | ||
ConnectionOpened | ||
File Access | ||
File Blocked | ||
Firewall Deny | ||
Firewall Misc Event | ||
Firewall Permit | ||
Timeout | ||
Traffic Inbound | ||
Traffic Outbound | ||
Tunnel Closed | ||
Tunnel Connection | ||
Web Appliation Access | ||
Alarm | Attacks | |
Bruteforce | ||
Dos | ||
Malware | ||
Misc | ||
Network | ||
Policy | ||
Scada | ||
Scan | ||
Aert | HostIDS Alert | |
IDS Alert | ||
IPS Alert | ||
Availability | State Critical | |
State Down | ||
State Unknown | ||
State Up | ||
State Warning | ||
Database | Error | |
Login | ||
Login Failed | ||
Logout | ||
Query | ||
Start | ||
Stop | ||
Recon | Misc | |
Scanner | ||
Application | DHCP Error | |
DHCP Request | ||
DNS Succesful Zone Tranfer | ||
DNS Zone Transfer Failed | ||
FTP commandExecuted | ||
FTPConnectionOpened | ||
Mail Received | ||
Mail Sent | ||
Spam Detected | ||
××× Closed | ||
××× Denied | ||
Web Error | ||
Web Denied | ||
Web Modified | ||
WebProxy | ||
Web Redirected | ||
Authentication | Account Lockout | |
Admin Access | ||
Brute force | ||
Default Credentials | ||
Failed | ||
FTP Login Failed | ||
FTP Login Succeeded | ||
Goup Added | ||
Goup Deleted | ||
Login | ||
Logout | ||
Password Change Failed | ||
Password Change Succeeded | ||
User Changed | ||
User Created | ||
User Deleted | ||
Exploit | Attack Response | |
Buffer Overflow | ||
Command Execution | ||
Cross Site Scripting | ||
Denial Of Service | ||
Directory Traversal | ||
File Inclusion | ||
Format String | ||
Spoofing | ||
ShellCode | ||
SQL Injection | ||
Malware | Adware | |
Backdoor | ||
Fake Antivirus | ||
Generic | ||
KeyLogger | ||
Spyware | ||
Trojan | ||
Virus | ||
Worm | ||
Policy | Anonymity | |
Check Failed | ||
Instant Messaging Chat | ||
P2P | ||
Phishing | ||
Porn | ||
Suspicious | Bad Traffic | |
Blacklist Address | ||
Database Activity | ||
DNS Protocol Anomaly | ||
FTP Protocol Anomaly | ||
HTTP Protocol Anomaly | ||
Mail Protocol Anomaly | ||
Netbios Activity | ||
Network Anomaly | ||
NFS Activity | ||
RPC Activity | ||
ScadaActivity | ||
SSH Activity | ||
SSH Protocol Anomaly | ||
Telnet Protocol Anomaly | ||
Threshold Exceeded | ||
Web Attack or Scan | ||
Inventory | Mac Change | |
MacDetected | ||
Operating System Change | ||
Operating System Detected | ||
Service Change | ||
Service Detected | ||
ServiceMisc |
免責聲明：本站發布的內容（圖片、視頻和文字）以原創、轉載和分享為主，文章觀點不代表本網站立場，如果涉及侵權請聯系站長郵箱：is@yisu.com進行舉報，并提供相關證據，一經查實，將立刻刪除涉嫌侵權內容。
