Squert is a web application that is used to query and view event data stored in a Sguil database (typically IDS alert data). Squert is a visual tool that attempts to provide additional context to events through the use of metadata, time series representations and weighted and logically grouped result sets. The hope is that these views will prompt questions that otherwise may not have been asked.

Demo / I
nstructions / Download

Showing the alert queue on the events tab:

Filtering by "trojan" and "current events" on the summary page:

Filtering by Bro intel hits @ 0200 on the views page: