Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for some alert correlation tool to reduce number of alerts about 50%. It should support IDMEF. I googled for alert correlation tools but just found ACARM-ng, TIAA and MACE and all of them are free or open source. Is there any commercial tool or some benchmark I could use?

share|improve this question

closed as off-topic by Rory Alsop Sep 14 '13 at 17:18

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

Tool recommendations are discouraged on this forum. However, any Security Information Event Management (SIEM) should be able to do what you are looking for. IBM QRadar, HP Arcsight, RSA enVision etc are a few on top of my head but you do research on your own which one is best for you. – void_in Sep 14 '13 at 13:30

Browse other questions tagged or ask your own question.