Project

General

Profile

Forums » User »

[Solved] Plugin activation

Added by Thierno DIOP almost 9 years ago

Hello,

I actived [BruteForcePlugin] in the file configuration of prelude-correlator and after testing
a brute force attack, I have cf result.png.
So what disturbs me is the presence of Eventstorm and Eventscan which are not actived.

Please I need help!!

Regards

result.png View (28.5 KB)


Replies (2)

RE: Plugin activation - Added by Antoine LUONG almost 9 years ago

Hello,

All correlation rules are activated by default unless specified otherwise in prelude-correlator.conf.
To disable a rule, you must uncomment the following lines:

[NameOfPlugin]
disable = true

Regards

RE: Plugin activation - Added by Thierno DIOP almost 9 years ago

Its works!!

Thanks you Antoine.

    (1-2/2)