VeriSecFreja

Archived

The VeriSec Freja application normalizes VeriSec Freja events and enables you to analyze VeriSec Freja data using pre-set dashboard views. You can further customize the dashboard and searches to perform in-depth analysis.

Release Details

Version: 5.0.0

Release date: 2020-05-14

Supported On: LogPoint v6.0.0 and later

SHA 256: 0395605555581308b857145e033df79a7781451fe9287b6d248ea96fd3c06c3e

Download

Package Details

Dashboard Package
- LP_Verisec Freja
Normalization Package
- LP_Verisec Freja
Label Package
- LP_VerisecFreja

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the VeriSec Freja v5.0.0 plugin:

Download the VeriSec Freja package from the Download section above.
Add the required VeriSec Freja as a device in LogPoint.
Create a collection policy with the Syslog collector and appropriate processing policy.
Assign the policy to the device.
Add the dashboard.

Log Format

Expected Log Format

VeriSec Freja

Log Samples

<159>2013-06-07 09:39:03,447 DEBUG frejaSOAPLogger - [id=1 user=IMMUNE IP=1.1.1.1] userWithDomain: username= segili domain= AD.XYZ.COM kerberosUsername= IMMUNE uniqueName= XYZ@AD.XYZ.COM

<159>2013-07-02 08:09:30,148 DEBUG xyzLogger - [id=1 user=logpoint IP=1.1.1.1] Starting Radius proxy authentication...

To export data to LogPoint, use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.