Result for 070A91F4BD8F6568BC23752A1A651FC917E060A7

Query result

Key Value
FileSize235652
MD51897290586C1B3F7E1F64DCB71FB4C5F
PackageDescriptionSecurity Information Management System [ Log Agent ] Prelude is a Universal "Security Information Management" (SIM) system. Its goals are performance and modularity. It is divided in two main parts : - the Prelude sensors, responsible for generating alerts, such as snort sensor, featuring a signature engine, plugins for protocol analysis, and intrusion detection plugins, and the Prelude log monitoring lackey. - the Prelude report server, collecting data from Prelude sensors, and generating user-readable reports. . Prelude-LML is a signature based log analyzer monitoring logfile and received syslog messages for suspicious activity. It handle events generated by a large set of components, including but not limited to: Apache, BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nagios, NTsyslog, NuFW, PAM, Portsentry, Postfix, Proftpd, ssh, etc.
PackageMaintainerPierre Chifflier <pollux@debian.org>
PackageNameprelude-lml
PackageSectionadmin
PackageVersion1.0.0-5.3+b4
SHA-1070A91F4BD8F6568BC23752A1A651FC917E060A7
SHA-256DE5FCE204B978D8CB2E57FD2B05E162C1F6AF9481C48BBF291CC2E324D5918BE
hashlookup:children-total76
hashlookup:trust50

Network graph view

Children (Total: 76)

The searched file hash includes 76 children files known and seen by metalookup. A sample is included below:

Key Value
FileName./usr/share/doc/prelude-lml/README
FileSize1614
MD50B3622258A37E0DFB6B4706F99ABBE9B
SHA-1008F072B682051A22DF03F94BF07561919A86A2E
SHA-256BCB4A33B803CA04974F0CC3A5EE35A107AB5B94629CAE8C0F8FF39B509C996B2
SSDEEP24:yiwdzTWLV5oz3w5Ql0fy1XICIrmkXeJkt8MswCZORkeXZZTV/YcDwaq+ygXA:Mkoz3l1XtkXskt8DJORkgZZTV/yP
TLSHT1653140FEF63C317132402A8D721AD0E3CB96B4EE266021F0B8AC84C4236571C95B6BC9
Key Value
FileName./etc/prelude-lml/ruleset/netscreen.rules
FileSize2964
MD557A39BBF59A20DB99B1A538C5A6A98AC
SHA-101F4F4BAF2D73A9EA4C4ADEA85BBAC3C033E8920
SHA-2568801F72D64849010972D962B98FFF024D85359C599F94A11F943A2CD2749C7FC
SSDEEP48:luhW7Mlg4yUjH05RqhfcNU1ccK2blqhQaZSb2Rqh9xcK2b8qhzaZSbf:S3awwRtKW72blKQanRG72b8Kzay
TLSHT12851529C438042F94512116A190923F5B93CC1C8FEFF208892B8E306F295EFE776D9B5
tar:gnamebin
tar:unameroot
Key Value
FileName./etc/prelude-lml/ruleset/modsecurity.rules
FileSize12275
MD5426E4FF4DE1918B2BFB5DAE1CEB4FEF8
SHA-103468B2BE82D7C8FF39781C8567ADA1B74F13FBB
SHA-256EB85D9B6325F739284B884C5D0DEB4B97BF95176A28331D0B17585739ED02E2C
SSDEEP192:swtg3vM0EE01J0V09luETF2kaXYIDvVc4rrzCmLTxHeMviT+7c2P29232w+gttg9:swtgfMOQ+wlBpAW4euG
TLSHT1DB42745E392870316963E1542CAB13943835614ECBDB60D892F4F525D11EEAEF32BFE2
Key Value
FileName./usr/share/doc/prelude-lml/NEWS.gz
FileSize9218
MD54ABDD0738BA4BF509A322A7714F6B744
SHA-1052A6EDB93598ECBC8E44938A6BE30E5A0EB2CE4
SHA-256D3049BF6D459D42E183541453ECE4B8FCE69F9DC754341EE0CE3AE033C9BD426
SSDEEP192:7AKV+JIJsHCgV3SnqOp+CQBlStxOHpjGvzCow4Vh1HCg1ZzQyNTpx:MTIJsh9SqG1QTSt0pIWSnHCPyDx
TLSHT19A12B0CC4067E0AE1D077279A7B39891FC39CFAB93D95DBC4E38A2DB850168E101AD57
Key Value
FileName./etc/prelude-lml/ruleset/suhosin.rules
FileSize4599
MD5A54485C2257837E40975F24C397892E2
SHA-105DBFEAA0402CCA4443059129335315CE941F818
SHA-2568FDF81E7CFBD937FB73AA203E8E04904762C43C58C551A40D8A21C94B1D780C4
SSDEEP96:CwDI/IdEt6UiJaj0k2+5TmvA6UyaX0GagXr2E96Uyaj0kYdztFa6UiJaX0E:CwscE8faj0kFTmLNaX0Gam2EsNaj0kYW
TLSHT1DA91060D3B5858621D879028049503F16D74E388D6DD98F067B4835FA31AFACB69AFF6
Key Value
FileName./etc/prelude-lml/ruleset/webmin.rules
FileSize2729
MD5881040CFE0B575A509906405192678EA
SHA-105E110B7A9789AC37329EB4D80A71AF6247736BE
SHA-25693425432C54350DE9D7CE828F01FD8476AD688A955CB66BA5B981233B9BC5B3D
SSDEEP48:lV+sg4yUjH0hcruNESZjBzOi0HUH+zDpSZoBQaibQQH3H+zR:yFw5uNtZjBzOi0HVpSZoBQaibQQHk
TLSHT1DB5153CD9A4697B009060175061937E5A27C82D4FBE67848B378D249F315EFD37AD4A8
Key Value
FileName./usr/bin/prelude-lml
FileSize133288
MD53747D03048EAC8869A47E6BAC514995F
SHA-109B07CEB887572D8ED2846205F98FEB828795B8D
SHA-256E599C231A33BB560C91D1151CA92CE72F641E7E2CB15FFD020DA2B827EA6EACD
SSDEEP1536:PCTDr5m2CSwgmC95gIUqxeS/+PfZPVaaanTnfQs:K/Fm0wgmC95g9o/+ZkaaTnfQs
TLSHT1DAD3B673322C9B46DB82247F435EA6A133563D4E43708A93A650431F7FEEB1DCA1E949
Key Value
FileName./etc/prelude-lml/ruleset/squid.rules
FileSize7626
MD56BA91B132FD0E724D75A8789D9D02744
SHA-10E27456C75209A99783BC3830F3AB1084EAEC19B
SHA-256B8B4457FB3AC2ADFBDFA6BE8CEB0FF1018B1ADE9F650B5E96744D352DA854A94
SSDEEP192:vrw5clRIOXSIOXHIOXW6IOXoIOXgIX7IX3uEzXhQzag:zw2Fsa
TLSHT189F1634D3F2A99A14D8B1112286117E1E134D2E4E7D3A4C8D7B05932A20BFDCF726FB9
tar:gnamebin
tar:unameroot
Key Value
FileName./etc/prelude-lml/ruleset/checkpoint.rules
FileSize19783
MD53758C168285EFC9DC53FB6680FA3E133
SHA-10EC89F425217265014FEE07AEA96EA802D5A0564
SHA-256A7FC3286863CA138AABE310AA256BF0575587258B7DBC99E62449388600C3E4C
SSDEEP192:YwfaX0haX0gMaX0HaX02OXzbGDOXzbnOXzbR5OXzbSaX0slbOXzs00YmIeBX0A0+:YwOm5AMqTZoS+6XDLK
TLSHT13592314E676490D149471014285113B07E7CD5D8DBEF24C8E3B09622E666FECBF9EFA1
tar:gnamebin
tar:unameroot
Key Value
FileName./etc/prelude-lml/ruleset/f5-bigip.rules
FileSize3246
MD5E02280F2F3AA3FE02414F3ACB62D4F1F
SHA-10F3965B00F9AB8576A2C7E1F90A074D62967B4F2
SHA-256DFB5318F0282C800DA0D3A17AA0D3E08395C8644A98B3D77A692724176452190
SSDEEP48:lVRg4yUjH0hcGfk30XOuH0XOqHyxCbK+HX4:yw8k30XOuH0XOnR
TLSHT1CB61415D178192B08C030131204512F1757DD3D8EBEB5888A2B4D616F268EFEB6BDAB8
tar:gnamebin
tar:unameroot