Collects events from OSSEC agents and other network tools (like Snort or OpenVAS).
AlienVault OSSIM Reviews & Ratings 2026 | Gartner Peer Insights OSSEC & OSSIM Unified Open Source Security
Connects seemingly unrelated events from different sources to identify complex attack patterns. Collects events from OSSEC agents and other network
In a unified setup, OSSEC acts as the "eyes and ears" on individual machines, feeding its detailed findings into OSSIM for broader analysis. OSSEC & OSSIM Unified Open Source Security
Open Source Security Information Management by AlienVault (now AT&T Cybersecurity). It acts as a SIEM (Security Information and Event Management) platform that: