1. You want syslog events 430001? (Snort ips alerts) My scenario was FirePower services for ASA not ...

I think so. Its been a while since I tried to run it. Follow what I said in the earlier post and see...

So the trick is to comment out some sections of the nessus.pl script. I was able to get it to work l...

I am getting the same hash error. How do we fix it?

One issue i found is that if the malware is network based the virus name "c2=" doesn't show up. It d...

I take it that this will forward fireamp events as well?

Today's logstash conf file is for AMP for endpoints. You will need an api created inside of the amp ...

Today's logstash conf file is for Cognitive threat analytics. You will need an api created inside of...

Can someone make this module available for FSM6 or 6.2 Please? Its gone after upgrading.

Thanks for the info. I could probably script something. Once it is working it works quite well. :) I...

Is there an easy way to remove ip addresses from the local blacklist?

Got it working by uploading the gz part. Can't seem to get any data on it in analysis. I see the fil...

Did you ever figure out why it wasn't bypassing internal servers?