tripwire severity levels

kaplan71 · 03-11-2011, 12:03 PM

Hi there --

I have implemented tripwire onto one of our systems, and I wanted to tinker with the severity levels. I know the range is from 0 to 1,000,000 but I wanted to get ideas on what would be good values to assign to what events.

Can someone provide some feedback on this? Thanks.

timetraveler · 03-12-2011, 12:47 PM

Only you know which files should change and when. So you'll have to make a list then decide the importance and tweak until you get it the way you like it. Try some things out and let us know if it's not working or if something's working unexpectedly.