SITCH Sensor Alert TypesΒΆ
SITCH has a well-defined set of alerts, which are meant to be easy to parse with a log management or SIEM system.
The alert log message format is defined here: http://sensor.readthedocs.io/en/test/data.html#sitch-alert-log
The supported message types are listed here (in the __init__ function): http://sensor.readthedocs.io/en/test/_modules/sitchlib/alert_manager.html#AlertManager