To aid system administrators with post-attack intrusion analysis, the Kerf toolkit provides an integrated front end and powerful correlation and data-representation tools, all in one package.
Index Terms:
Intrusion analysis, log alerts, attack forensics, remote logging
Citation:
Javed Aslam, Sergey Bratus, David Kotz, Ron Peterson, Brett Tofel, Daniela Rus, "The Kerf Toolkit for Intrusion Analysis," IEEE Security and Privacy, vol. 2, no. 6, pp. 42-52, Nov. 2004, doi:10.1109/MSP.2004.113