Package network.events

Interface Summary
RemoteEventInterface  
 

Class Summary
AbnormalLoginProfileEvent  
AbnormalRootLoginEvent  
AgentAliveEvent  
AgentServerDeadEvent  
AgentServerLogEvent A generic event class which records an agent server log entry
AjantaResourceMonitorEvent  
AjantaWatcherEvent  
BlacklistEvent  
CERTAdvisoryEvent  
CERTSnortEvent  
CheckSignatureEvent  
ConfigurationErrorEvent  
ConnectEvent  
CPUMonitorEvent  
CPUTimerEvent  
DaemonDeletedEvent  
DeletedProcessEvent  
DiskFullEvent  
DummyEvent  
DynamicUserTrackingEvent  
Event  
FailureEvent  
FileAddedEvent  
FileChangedEvent  
FileConsistencyEvent  
FileDeletedEvent  
FileEvent  
FileLastChangedEvent  
FileSBitChangedEvent  
FileSystemEvent  
FileSystemFullEvent  
FingerprintEvent  
FtpAlarmEvent  
FtpEvent  
IllegitimateRootPresenceEvent  
InvalidUserAlarmEvent  
IPEEvent  
LocalUserSwitchEvent Indicates that a user is trying to log on as another user.
LoginEvent  
LoginFromBlacklistEvent  
LoginProfileGeneratorEvent  
LogoutEvent  
MarkFailEvent  
MigrationEvent  
MultipleAccountSwitchEvent  
MultipleLoginAttemptsEvent  
MultipleLoginFailureFromSameLocationEvent  
MultipleUserLoginFailureEvent  
NewProcessEvent  
NewRootProcessEvent  
NewSignatureEvent  
OutsideAndLocalLoginEvent  
OutsideDomainLoginEvent  
PortscanEvent  
ProcessMonitoringEvent  
RemoteLoginEvent  
RemoteUserSwitchEvent This event is generated when a user has succeeded in logging in as another user
RLoginEvent  
RootPresenceEvent RootPresenceEvent indicates that root is present on a machine (either by a login (xdm, ssh, su ,etc) or by a process running as root)
RPCAbnormalTrafficEvent  
RSHEvent  
RunawayProcessEvent RunawayProcessEvent indicates that a process has been running for too long, that it is using too much memory, or that it is using too much CPU time
SFtpEvent SFtpEvent indicates that a user is attempting to login via sftp
SMSAgentAliveEvent  
SMSFailureEvent  
SnortEvent  
SnortRestartEvent  
SnortRuleEvent  
SshEvent This event indicates that a user connected via ssh
SshSftpEvent This event indicates that a user has connected via ssh or sftp
SUDOEvent SUDOEvent indicates that a user attempted to use the sudo command
SUEvent SUEvent indicates that a user has attempted to switch users using su.
SyntheticEvent This event indicates that there is a new line in the syslog file matching some given patterns.
SyslogEvent This event indicates that there is a new line in the syslog file matching some given patterns.
TelnetEvent This indicates that a user has attempted to connect via telnet.
TelnetFtpLoginEvent This event indicates that a telnet or ftp login has occured
TerminateAgentEvent When placed in a detector's event queue, the detector will shut down Not implemented
TerminateDetectorEvent When placed in a detector's event queue, the detector will shut down Not implemented
TestEvent  
TimerEvent This event indicates that a given amount of time has passed.
UserPresenceEvent This event indicates that a user is logged on.
UserSwitchAttemptEvent Indicates that a user is trying to log on as another user.
UserSwitchConfirmEvent This event is generated when a user has succeeded in logging in as another user
UserSwitchToRootEvent This event is generated when a user has succeeded in logging in as another user
WrapperEvent This event indicates that a given amount of time has passed.
XDMEvent An XDMEvent indicates that a user has attempted to log on through XDM.