[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ossec-list] SQL Injection Detection

To: ossec-list@xxxxxxxxx
Subject: [ossec-list] SQL Injection Detection
From: <saman@xxxxxxxxxxxx>
Date: Thu, 7 Sep 2006 11:55:44 +0300
Content-transfer-encoding: 7bit
Sensitivity: Normal

Hello,

While I have IIS line on agent config file, after I did sql injection attacks againts web server I have not got any alert yet. I have not seen any alerts in /var/ossec/logs/alerts/alerts.log. I checked IIS log and I see attack logs. Is there anything else to add server's config or agent's config ? 

from agent's config
----------------------
  
<localfile>
    <location>C:\WINNT/System32/LogFiles/W3SVC1/ex%y%m%d.log</location>
    <log_format>iis</log_format>
</localfile>

Follow-Ups:
- [ossec-list] Re: SQL Injection Detection
  - From: Daniel Cid

Prev by Date: [ossec-list] active-response
Next by Date: [ossec-list] Chatty PIX rules
Previous by thread: [ossec-list] Re: active-response
Next by thread: [ossec-list] Re: SQL Injection Detection
Index(es):
- Date
- Thread

OSSEC home | Main Index | Thread Index

OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.