ossimvmwareimage

one

Plug and play once you have vmware going...OSSIM

OSSIM, or the Open Source Security Information Management is a collection of tools designed to aid network administrators in computer security and intrusion detection and prevention. OSSIM is BSD licensed. The project's goal is to provide a comprehensive compilation of tools which, when working together, grant an administrator a view of all the security-related aspects of their system. OSSIM also provides a strong correlation engine, with detailed low-, mid- and high-level visualization interfaces as well as reporting and incident managing tools, working on a set of defined assets such as hosts, networks, groups and services.

All this information can be filtered by network or sensor in order to provide just the needed information to specific users allowing for a fine grained multi-user security environment. Also, the ability to act as an intrusion-prevention system based on correlated information from virtually any source result in a useful addition to any security professional.