View source for Aanval

{{short description|Commercial SIEM product}}
{{Infobox software
| name                   = Aanval
| screenshot             =<!-- Deleted image removed:  [[Image:Aanval 8 Console Home.png|200px]] -->
| caption                = Aanval Console Screenshot
| collapsible            =
| author                 = Loyal Moses
| developer              = Tactical FLEX, Inc.
| released               =
| latest release version = 8.0 <ref>[https://www.aanval.com/download Aanval - Download] {{webarchive |url=https://web.archive.org/web/20151207204510/https://www.aanval.com/download |date=December 7, 2015 }}</ref>
| latest release date    =
| latest preview version =
| latest preview date    =
| programming language   = {{ubl|[[PHP]]|[[Perl]]}}
| operating system       = {{Plainlist|
* [[Linux]]
* [[Unix]]
* [[Mac OS X]]
}}
| platform               =
| size                   =
| language               =
| status                 =
| genre                  = [[SIEM]]
| license                =
| website                = {{URL|http://www.aanval.com/}}
}}
'''Aanval''' is a commercial [[SIEM]] product designed specifically for use with [[Snort (software)|Snort]], [[Suricata (software)|Suricata]], and [[Syslog]] data.<ref>[http://www.aanval.com/ Aanval - Snort & Syslog Intrusion Detection, Correlation and Threat Management<!-- Bot generated title -->]</ref> Aanval has been in active development since 2003 and remains one of the longest running Snort capable SIEM products in the industry. {{Citation needed|date=May 2020}} Aanval is [[Dutch language|Dutch]] for "attack".<ref>[http://en.wiktionary.org/wiki/aanval aanval – Wiktionary<!-- Bot generated title -->]</ref>
== History ==
Aanval was created by Loyal Moses in 2003 but was not publicly made available until March 2004 where it was released under the private commercial license C1-RA1008.<ref>{{Cite web |url=http://support.aanval.com/index.php?pid=knowledgebase&cmd=viewentclient&id=29 |title=Aanval End-User License Agreement (EULA)<!-- Bot generated title --> |access-date=2011-07-27 |archive-url=https://web.archive.org/web/20110314130334/http://support.aanval.com/index.php?pid=knowledgebase&cmd=viewentclient&id=29 |archive-date=2011-03-14 |url-status=dead }}</ref> Throughout the lifecycle of the software it has also been referred to as OpenAanval <ref>{{Cite web|title=openaanval-1.48-stable.tar.gz ≈ Packet Storm|url=https://packetstormsecurity.com/files/33386/openaanval-1.48-stable.tar.gz.html|website=packetstormsecurity.com|access-date=2020-05-03}}</ref> or ComAanval in addition to Aanval.
Aanval's had provided [[AJAX]] style security event monitoring and reporting from a web-browser. Since Aanval's creation, it has developed into an [[intrusion detection]], [[Correlation and dependence|correlation]] and threat management console with a specific focus on normalizing Snort, Suricata, and Syslog data. {{Citation needed|date=May 2020}}
Several information security related books have been published that include details and references to Aanval, including "Linux Server Security, Second Edition"<ref>[http://my.safaribooksonline.com/book/networking/linux/0596006705 Linux Server Security, Second Edition: Safari Books Online<!-- Bot generated title -->]</ref> by [[O'Reilly Media]], "Security Log Management"<ref>[http://my.safaribooksonline.com/book/networking/security/1597490423 Security Log Management: Safari Books Online<!-- Bot generated title -->]</ref> by [[O'Reilly Media]], "Snort: IDS and IPS Toolkit"<ref>[http://my.safaribooksonline.com/book/networking/intrusion-detection/9781597490993 Snort: IDS and IPS Toolkit: Safari Books Online<!-- Bot generated title -->]</ref> by [[O'Reilly Media]] and in 2010 "Unix and Linux System Administration Handbook, Fourth Edition"<ref>[http://my.safaribooksonline.com/book/operating-systems-and-server-administration/linux/9780132117371 Unix and Linux System Administration Handbook, Fourth Edition: Safari Books Online<!-- Bot generated title -->]</ref> by [[O'Reilly Media]].
== See also ==
* [[Snort (software)|Snort]]
* [[Intrusion detection system]] (IDS)
* [[Intrusion prevention system]] (IPS)
* [[Network intrusion detection system]] (NIDS)
* [[Sguil]]
== References ==
{{Reflist|2}}
== External links ==
* {{Official website|http://www.aanval.com/}}
* [http://wiki.aanval.com/ Aanval wiki]
* [http://www.snort.org/ Snort homepage]
* [http://www.openinfosecfoundation.org/ OISF homepage]
[[Category:Computer security software]]