Thanks to all who responded . As a novice in this area, I have many questions.
What is the increase in CPU with any intrusion detection product ? . When is intrusion detected ? Meaning in real time when the event happens or is it logged/posted later on a some report ? ---------- Original Message ---------- From: Charles Mills <[email protected]> To: [email protected] Subject: Re: Need Hep with HIDS and z/OS Date: Sat, 15 Jul 2017 13:00:33 -0700 Wow. Sorry. Server must have been having a bad day. I just clicked on the link that you re-posted and it works for me. I use Chrome, but I believe it is tested will all the usual suspects. Can you try again? Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Edward Gould Sent: Saturday, July 15, 2017 10:31 AM To: [email protected] Subject: Re: Need Hep with HIDS and z/OS > On Jul 14, 2017, at 7:37 PM, Charles Mills <[email protected]> wrote: > > "log user actions and tie said actions back to that user via a unique > identifier" > > That is not intrusion detection. Intrusion detection is a good thing, > but it is basically looking for outsiders trying to get in. (Loosely > speaking.) Not known users doing good and occasionally bad things. > > <commercial plug> > > https://correlog.com/mainframe-security-solutions/sas-correlog-mainfra > me/ > <https://correlog.com/mainframe-security-solutions/sas-correlog-mainfr > ame/> > + > https://correlog.com/software/download-czdash-rcpt.html > <https://correlog.com/software/download-czdash-rcpt.html> > > Does exactly what you describe Charles, I went to the url you supplied:https://correlog.com/mainframe-security-solutions/sas-correlog-main frame/ <https://correlog.com/mainframe-security-solutions/sas-correlog-mainframe/> and got this: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator at [email protected] to inform them of the time this error occurred, and the actions you performed just before this error. More information about this error may be available in the server error log. Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
