Capabilities

In this section, you will find:

• a deeper explanation of how each capability works,
• configuration options for specific capabilities,
• frequently asked questions, and
• some practical examples.

If you find a problem, error or if you want to ask related questions, please contact us through our mailing list.

• Log data collection
  • How it works
  • Configuration
  • FAQ
• File integrity monitoring
  • How it works
  • Configuration
  • FAQ
• Anomaly and malware detection
  • How it works
  • Configuration
  • FAQ
• Monitoring security policies
  • Rootcheck
  • OpenSCAP
  • CIS-CAT integration
• Monitoring system calls
  • How it works
  • Configuration
• Command monitoring
  • How it works
  • Configuration
  • FAQ
• Active response
  • How it works
  • Configuration
  • FAQ
• Agentless monitoring
  • How it works
  • Configuration
  • FAQ
• Anti-flooding mechanism
  • Why an anti-flooding mechanism is needed
  • How it works: Leaky bucket
  • Use case: Leaky bucket
  • Anti-flooding in agent modules
• Agent labels
  • How it works
  • Use case
• Vulnerability detection
  • How it works
  • Compatibility matrix
  • Use case: Running a vulnerability scan
• VirusTotal integration
  • What is VirusTotal
  • ToS: Public API vs Private API
  • Integration
• Vuls integration
  • What is Vuls?
  • How it works
  • How to configure Vuls scans
  • Use case
  • Centralized configuration