debian/ossec-hids/var/ossec/rules/mhn_dionaea_rules.xml

   1 <!-- Rules for Modern Honeypot Network - Dionaea, -->
   2
   3 <!-- IDs: 53826 - 53829 -->
   4 <!-- include /var/log/mhn/mhn-json.log to ossec.conf -->
   5
   6 <group name="mhn,json">
   7
   8   <rule id="53826" level="8">
   9     <decoded_as>dionaea</decoded_as>
  10     <description>Connection to Dionaea Honeypot identified</description>
  11   </rule>
  12
  13 </group>