Welcome to the Aanval Wiki. Snort, Suricata and Syslog Intrusion Detection, Situational Awareness and Risk Management.

Visit for more information.

Main Page

From Aanval Wiki
Jump to: navigation, search

Here you will find generous amounts of technical resources for Aanval, Snort, and Suricata, as well as anything else relating to intrusion detection, information security, etc.

About Aanval

Aanval 8 Console

Aanval is a commercial Snort, Suricata, and syslog intrusion detection, correlation, and threat management system. Aanval has been in active development since 2003 and remains one of the longest running Snort-capable management consoles in the industry.

Government security, defense organizations, weapons manufacturers, technology corporations, global financial organizations, space explorations, educational institutions, healthcare providers, and many others depend upon Aanval as a part of their security infrastructure.

With more than 6,000 customers in more than 100 countries, Aanval has a proven record of success, quality, and history upon which each of our customers can rely.

Aanval has been designed to correlate event data and logs from hundreds of vendor products and solutions including those listed below.

Apple Computers.jpg Barracuda Networks.jpg Cisco Networking.jpg Emergingthreats.jpeg Snort.jpg Sourcefire.jpg Suricata.jpeg

About Tactical FLEX, Inc.

Tactical FLEX, Inc. is a privately owned software development firm based in Washington, specializing in information security research, engineering, technology design, and production. With the technological development of Aanval, Tactical FLEX, Inc. has become a global provider of information security vulnerability and risk management software solutions that protect businesses and organizations. The firm also provides IT consulting and professional services.

The steps and guides below will get you started with an Aanval setup and solution.

Step One: Download Aanval

Download Aanval

Step Two: Install Aanval and Your IDS

Install Aanval Install and Configure Snort, Suricata, and Barnyard2
Aanval 8 Installation and Sensor Setup Guide
Aanval 7 (SAS) to Aanval 8 Upgrade Guide
Aanval 8 and Snort Installation Guide for OS X El Capitan (10.11)
Aanval v7 (SAS), Snort, and Barnyard2 Installation Guide for OS X Yosemite (10.10)
Managing Multiple Snort Instances and Interfaces with Aanval
(Includes Snort and Barnyard installation and configuration)
Snort Install Guide
Suricata Install Guide
Barnyard2 Install Guide

Step Three: Connect, Configure, and Manage Your Sensors and Signatures

IDS Sensors IDS Signatures Syslog Sensors
Adding a MySQL Sensor Signature Management Adding a Syslog Sensor
Adding a Unified2 Sensor Signature Sources Syslog Filter Assignment
Managing Your MySQL and Unified2 IDS Sensors

Additional Configuration Tools and Options

Aanval Tools and Configuration
Action Management / Automation
Advanced Search
Console Events
Datastore Management
Event Suppression
Event Validation
Live Event Correlation, Live Event Monitor, Live GeoLocation
Network Host Scanning
Reports (Detailed, On-Demand, and Scheduled)
Signature Processing Reports
Situational Awareness
Syslog Mirroring

Support and Services

Self Support Commercial Support Security Services
FAQs Aanval Training
Troubleshooting Guide


Industry Focus Technology Threats and Security Definitions
Biotechnology and Pharmaceutical Aanval, IDS, and SIEM Utilizing SIEM Aanval/Aanval SAS
Education Big Data Hackers Inside Hotels Barnyard/Barnyard2
Energy and Utilities Network Operations Center and Managed Service Provider SIEM Moderates Cost of Cyber Crime Intrusion Detection System (IDS)
Enterprises Situational Awareness Compliance Doesn't Equal Security Nmap
Financial and Business Services Snort, Suricata, and IDS Oinkmaster Code (Oink Code)
Government and Military SIEM
Healthcare Snort
Legal Suricata
Reseller Syslog
Small Business Unified2

Webinars and Videos

Webinars Videos
Previous and Upcoming Webinars

External Links

Aanval Snort and Suricata