New answers tagged


There are two ways on how to run an IDS: to detect attack attempts to detect successful attacks The mode is defined by the rules which are enabled. In most environments, like yours, there is no clear strategy which leads to having both kinds of events triggered. If you want to detect possibly successful attacks only (and ignoring attempts which are not ...

Top 50 recent answers are included