advICE :Intrusions : help-parameters.html

When intrusions are detected, the system will discover information related to those intrusions. These are called the parameters of the intrusion.

Example: When an attacker is attempting to compromise a web server, the URL (filename) the attacker is accessing will be pulled out as a parameter.

Currently, this parametric information is not visible in the local GUI, but is available as part of ICEcap reports.

 
Version appeared: