Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'm looking for some alert correlation tool to reduce number of alerts about 50%. It should support IDMEF. I googled for alert correlation tools but just found ACARM-ng, TIAA and MACE and all of them are free or open source. Is there any commercial tool or some benchmark I could use?

share|improve this question
1  
Tool recommendations are discouraged on this forum. However, any Security Information Event Management (SIEM) should be able to do what you are looking for. IBM QRadar, HP Arcsight, RSA enVision etc are a few on top of my head but you do research on your own which one is best for you. –  void_in Sep 14 '13 at 13:30
add comment

closed as off-topic by Rory Alsop Sep 14 '13 at 17:18

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

Browse other questions tagged or ask your own question.