Good Evening! I'm currently searching for a way to block netscans, but did not find a matching rule in ossec. Does anyone know if and where ossec searches for portscans?
-- Lars
Good Evening! I'm currently searching for a way to block netscans, but did not find a matching rule in ossec. Does anyone know if and where ossec searches for portscans?
-- Lars