Mitchell Hanks

Custom Log Collection Content in SA

Blog Post created by Mitchell Hanks Employee on May 9, 2016

This post will be a series of How-To videos and supporting documents on creating custom content for unsupported log event sources in SA.  This will include writing custom File/ODBC typespecs, SNMP transforms, etc.  The work of producing this content will be on-going, so I will be updating this post with new content as I have it available.  See the attachments to this post for related files.

 

Video 1:  Creating a Custom ODBC or File Typespec for Log Collection

 

Video 2:  Extracting Contents of SNMP Traps from a PCAP

Outcomes