CERT Orcus
• Software
Orcus is a system for analyzing passively-collected DNS information. It includes a capability for analyzing all DNS information that has been seen (the “resource record database”), as well as a faster name-to-address mapping with daily resolution (the “na
Publisher
Software Engineering Institute
Abstract
Orcus is a system for analyzing passively collected DNS information. It includes a capability for analyzing all DNS information that has been seen (the “resource record database”), as well as a faster name-to-address mapping with daily resolution (the “name database”).
Orcus is designed to work with YAF to collect or process data, and it may store information in either a PostgreSQL or an Oracle database.