securityonion icon indicating copy to clipboard operation
securityonion copied to clipboard

FIX: Cleanup Setup Terminology

Open defensivedepth opened this issue 3 years ago • 1 comments

Eg:

NSM IDS HOME_NET 'adding sensors remotely' ntp vs NTP CIDR (some give examples, some dont)

defensivedepth avatar Jan 27 '22 18:01 defensivedepth

image

Consider also adjusting the "optional components" setup screen to more helpful descriptions, such as (just ideas, not set in stone):

  • OSSEC FleetDM: Device management
  • WAZUH Host-based monitoring
  • PLAYBOOK Incident response playbook management
  • STRELKA Packet file extraction

From Doug: There's a lot of overlap between OSQUERY and WAZUH and it may be difficult to differentiate between the two in those few characters.

jertel avatar Jan 31 '22 19:01 jertel