Nemea-Detectors icon indicating copy to clipboard operation
Nemea-Detectors copied to clipboard

Published 20 hours ago • verified publisher icon CESNET

Bruteforce detection does not report targets

Open thorgrin opened this issue 6 years ago • 0 comments

The bruteforce detector puts input and output targets to the NOTE output field. Would it make sense to add some target fields instead? Possibly a dynamic one from which the reporter could extract all IP addresses? It would help to improve the quality of the reported incidents.

BTW what is the meaning of input/output targets? What is the difference?

thorgrin avatar Jun 22 '18 11:06 thorgrin