EvlWatcher is a network and administration application designed to help administrators monitor, analyze, and respond to security events on their networks in real-time. It provides comprehensive visibility into the security posture of the enterprise, enabling administrators to quickly identify malicious activities and respond accordingly. EvlWatcher provides a central dashboard that displays real-time information about the status of the network, including alerts, events, and reports. Administrators can drill down into specific events, view log files, create reports, and set up automated responses to potential threats. The application also offers a variety of security features, including rules-based alerts, access control, and encryption. Additionally, EvlWatcher integrates seamlessly with existing IT systems, allowing for unified security management.
The discontinued software has been established open source and has been abandoned by the main developer. It looks like a very good detector but fails to stop attacks successfully. When I have it set to block IP addresses after 5 failed attempts, I should not see multiple entries showing 300 attempts with the same IP addresses.