Downloads

iisidsd-v0.0.1

Welcome to iisidsd - an Intrusion Defense System for IIS webservers

Due to me being a moron, I've had to start fresh - this is a new version 
of the project, and it is still in development. will be adding more 
features and functionality as time goes on.

It currently monitors your IIS ETW event stream, identifies the domains 
hosted on your server, and detects problematic requests. (it can show 
all activity, but that can be noisy, so it is not the default)

It won;t currently interact with the IP DENY lists of the targetted 
IIS server, but that is planned for the future. This functionality was 
working previously, but I broke it when trying to change too many things 
too quickly, and I didn't have source control happening (I do now :P )

The Public repo is located at https://github.com/dbhaigh/iisidsd and 
release v0.0.1 is available for download from the link above

Over the next few days I'll be getting the integration with the IIS 
server and the pertinent IP DENY lists sorted out, then I'll be 
getting the Ban/Unban behaviour sorted, before adding more features 
and functionality'

Enjoy!

-=A=-

.