| Key | Value |
|---|---|
| FileSize | 212844 |
| MD5 | C5B8EE8727C2DC22CC39A93DA68CAE27 |
| PackageDescription | Security Information and Events Management System [ Log Agent ] The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected. |
| PackageMaintainer | Pierre Chifflier <pollux@debian.org> |
| PackageName | prelude-lml |
| PackageSection | admin |
| PackageVersion | 4.1.0-2 |
| SHA-1 | 2BEB5678884168F2AD1EA00C886A04ACC0788AE4 |
| SHA-256 | D6AF13BD2A02D28F5A7E76C2F8885C0F4FD81A364949A1A7A59554CD272445CF |
| hashlookup:children-total | 16 |
| hashlookup:trust | 50 |
The searched file hash includes 16 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./etc/prelude-lml/prelude-lml.conf |
| FileSize | 6917 |
| MD5 | 4B210089C022CDA5FEEA7F84D448EF59 |
| SHA-1 | 2A4275053E100658A3AABDC4B42FAFFCCCFBEE6D |
| SHA-256 | 1034D4064DA3BA5574B02FA1EAB815AA3CFC27C653A477AB40D3BAB0E06D469F |
| SSDEEP | 192:mKqkehijEnNUiXyB0Xus6vzGUgp4MlO25e:mkSPUsWkOP |
| TLSH | T133E17466D24D373B13CB03A150AEE1DD9B3D904D6E73341262DD98683201E7892FBBE5 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/HACKING.README |
| FileSize | 756 |
| MD5 | 1475976CC703D5CACF83483486774A0B |
| SHA-1 | 2FCBA98BFEAFCEA21E12CAD85F979583F9B51DA0 |
| SHA-256 | 1DB2E6985C825EB5742271954E017E2F8DDEE0A11A022EDDA6F9A00C19F7846C |
| SSDEEP | 12:hBe+oVOrqLRh1y4AvoInFbyE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvw49IxM5yCmFjqNHkxNEeAvW |
| TLSH | T19D01D01EF26C62A4198105E17682E3F2660F41DACB324432E257D4C533BBA7E853F5DD |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/changelog.Debian.gz |
| FileSize | 3014 |
| MD5 | E9F0C0666FC932F99FA5A167388FE448 |
| SHA-1 | 44B8C8DFCA878E5AE9B267C22CCAF09494A7EE9C |
| SHA-256 | 3960BF86FC2D94B0BF418C50931A13BEA53B0B567418128A8AD0871CD908D5A6 |
| SSDEEP | 48:XYuPxJB1oFyoclBTxlRlKSmirigY8ZQkbjUMD54wH9T+fbbbR9bK3XKLug+53drm:oObB1OclBT9ovi3Yqmyt+fbbbRVK36YS |
| TLSH | T1E2515DBEC81C5DF10EE92C30C15E5618A62C113EFD8F552074E3C46BB4670AAD5CE684 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/README.Debian |
| FileSize | 517 |
| MD5 | 1298A4E7F1407B397C009E970A0EA593 |
| SHA-1 | 487955E33B167AA2C765B8B1BC951E55608DC0BA |
| SHA-256 | 2FC3B69E22C20B480C2AA5B833AD58E4BB3096BF6AC1D2EEA10F0327426B581B |
| SSDEEP | 12:nkcoBHPyNmY/m5LaR9dEB+EsRFkcvhY1V2kK0huKIcKe/m9:QNKmY/m5LudEB+EsbhCfK0huKIcKeu9 |
| TLSH | T1F9F09EE66DCD788511F0DBEAF022C090D65BFC5E50407131700CE1EE410234C05CE210 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/copyright |
| FileSize | 7030 |
| MD5 | 1CBEF425C9C3FA5C7ADC119185A99A53 |
| SHA-1 | 50CCBF06F6C0F142785409FB58D1E05F9CB09037 |
| SHA-256 | 2298353684BA3A7062161C6E2D1EC4BE3C86396B91B307F5CC1487D34C0970BD |
| SSDEEP | 192:xZPRDLOrXc3vlRH3o13hy5pWo/z4zqeFs:xNRDars3vvXqhUWo/z4zqeFs |
| TLSH | T108E1854E1940C7BB19C01BA0394E95DEE31757EE767EC490105E939EAE0BB3A17F24E4 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/mips-linux-gnu/prelude-lml/debug.so |
| FileSize | 9980 |
| MD5 | 69155035B1D971579247F5951E4E2D41 |
| SHA-1 | 6D2A1E3CF3E3082D3AB808C50FFD948F84B49581 |
| SHA-256 | E531467C8AB6D358110B6A0C15895159C44C456556D4EAEF981F861376D46292 |
| SSDEEP | 96:gfSW3ZMBWBcd9d803YcDR7Pna2BhWkBd+8YzeXDuff:z8I7DR7PnaItTun |
| TLSH | T1FE22759F53318D1EE09BC374E0B7C7E037E8159559D14623A6BCE2441B5930C6D2AFEA |
| Key | Value |
|---|---|
| FileName | ./usr/lib/mips-linux-gnu/prelude-lml/pcre.so |
| FileSize | 32848 |
| MD5 | 0B3C490B2EBFCBEDF72723CA8B577205 |
| SHA-1 | 76B3E42A49A78EF53D7942E201A5F2DEE65399C4 |
| SHA-256 | 3DBA6272D86A5FF2DD2A53F95BD59BFF2C1CAE54BAC6078E09A93391E2EEC0F4 |
| SSDEEP | 768:xhXcv/3EAcUVSDaEB/kcmNx3UEqrG78prpPs:xhXcv/3EAcUVSOE5khEDrA8prts |
| TLSH | T12CE2071B23218F1CF262C6B49877C7E567F811932DD08919E67CE22D2AC4A2D5C1FEE5 |
| Key | Value |
|---|---|
| FileName | ./lib/systemd/system/prelude-lml.service |
| FileSize | 152 |
| MD5 | 8C583644419BCD84F97511F76D10284A |
| SHA-1 | 9E329CC69398403460EDDA0CDA307153F7980D0A |
| SHA-256 | B1833CB9E3EAE96398A4645ED706256053E9BA15B6EE81F4ABED3BFC2200DD66 |
| SSDEEP | 3:zMZa7+rUSXABlRVGmDMzdK+aQ9sHSdS5czTLESkQmWA1+DRvn:z8tU6wlzGmDMzdK+aG858ILQmWA4Rv |
| TLSH | T1C3C08C29F48064A0980A2AABCE724BA85A504508AF8DF82436A124291AC0656A4348A9 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/changelog.gz |
| FileSize | 130440 |
| MD5 | C491AD306C3874741112AFF482CEDAFF |
| SHA-1 | AEF35D708636EA9C9FAF626B3DC45D38D90497B7 |
| SHA-256 | E7BB2173DA1C8DC2DACD71755C8C78866BEE90C1A10F2B54FF3FBF03C562C1CF |
| SSDEEP | 3072:R9e9lrNLKlL3v4l9coNKg3RS0KGFXGXwKPAnbPq/y/S4ydBFrcj:R9e/rNkzA3YmFBZGASAnbia/S4ydBFrY |
| TLSH | T134D312248439252D54981C96869BFB84DFE6AABA31376F3AF1C2F544782BF4CC670DD0 |
| Key | Value |
|---|---|
| FileName | ./usr/include/prelude-lml/prelude-lml.h |
| FileSize | 2439 |
| MD5 | 9A72521F2588924E6A03B1DF1B06E871 |
| SHA-1 | CC634DDA111D1365B631E1871E3C033309CB4764 |
| SHA-256 | DB0633C74EFB1F5703926B8FE6D8A4BD8EE06FD06F6D04DF4364E7A226486CF5 |
| SSDEEP | 48:9amdpey3HTyiDNxUbta6zr4yno6SuYUSui7WoPoFnojTTnOB05s:9TBD0XZ/Z |
| TLSH | T13441A9D0983EC7A63DB20BF120D652C3600962ED7A65DAC2754EF35C446737C1222BA3 |