Thanks to Russ McRee, Sguil made an appearance in a poster session at the 2005 Eighth International Symposium on Recent Advances in Intrusion Detection (RAID) I’ve posted Russ’ slides (.pdf, 5.8 MB) on the SGuil home page to conserve Russ’ bandwidth. I have never used Aanval, and it does not appear in the FreeBSD ports tree. I may still give it a try when I find time to use it.”]
Source: https://taosecurity.blogspot.com/2005/09/sguil-at-raid-2005-thanks-to-russ.html