SECEF Wiki¶

IDMEFv2 : Request for comments on IDMEF evolution proposition¶

• Feel free to comment in forums.

Formats¶

• Quick introduction on alert formats and what they are.

Comparison of alert formats¶

• Long comparison of existing formats (CEF, LEEF, SDEE, etc.)

IDMEF format¶

• Detailed description of the IDMEF Format (class schema, etc.

IODEF format¶

• Detailed description

SDEE format¶

• Detailed schema of SDEE format

HOWTO¶

How to use IDMEF¶

• Tutorial on IDMEF content and how to use it

How to use LibPrelude¶

• Detailed tutorial on how to use LibPrelude and code a IDMEF client (python, C, ruby,etc.)

How to build a sensor¶

• Detailed tutorial on how to create a new sensor that can communicate in IDMEF through the LibPrelude library.

LibPrelude IDMEF path¶

• Detailed description of all IDMEF fields

How to use IODEF¶

• Detailed description of IODEF structure and fields.