Snare Agent for AIX provides front end filtering, remote control, and remote distribution for AIX audit data, interfacing with the underlying AIX audit subsystem.
Snare Agent for AIX can be used as a standalone auditing tool, or can send data to the Snare Server for analysis and storage.
InterSect Alliance have developed software that interfaces with the AIX auditing subsystem to collect, and select audit log information based on a series of user-defined filters. The agent can then send the converted data back to a central location over the network (via UDP) in real-time, allowing security administrators to implement a centralised audit collection, analysis and archive facility with minimal audit client resource utilisation.
Snare for AIX also provides a remote control facility, and user account snapshot tool, via a micro embedded web server.
Please note that there has been limited development on this agent.
