QuestionQ170

VerifiedProactive Threat Detection

Where can you locate the reputation IP database when you want OSSIM SIEM to monitor traffic from IP addresses with a known bad reputation?

Explanation

OSSIM uses /etc/ossim/server/reputation.data as the IP reputation data file for identifying traffic associated with known malicious or low-reputation IP addresses.

Community Discussion

No comments yet. Be the first to start the discussion!