Result for 340B29A7DF88B3105F736C3DA6C6E348BCC59B86

Query result

Key Value
FileName./etc/prelude-correlator/rules/python/EventStormPlugin.py
FileSize1768
MD5F7A20A2C5DC6B3B2BEB88A49B69EB604
SHA-1340B29A7DF88B3105F736C3DA6C6E348BCC59B86
SHA-256639BBF082925E9CE5C88F9B23D0FD2EE4EE759EC7F1B374A5ECFA562D1687125
SSDEEP24:QsJ4lHK2ahJiyUVOkHxHqTbVloY5w7qDvKEss+wiMXFFN4XFFoTDNsIQ0fGMNGM9:tWHDg4yUjHTYyuKnwVF6FoTpsIz/
TLSHT17E31768D5471DA70590403F4214BA4DD73295AC366A9AC14B41CD98DFBD5EB582326EC
hashlookup:parent-total8
hashlookup:trust90

Network graph view

Parents (Total: 8)

The searched file hash is included in 8 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize185752
MD5C01F8DE953822D0DBC5CAFE6D2A02E68
PackageDescriptionSecurity Information and Events Management System [ Correlator ] Prelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules. . The features currently include: * Rapid identification of important security events, enabling the analyst to assign task priorities * Alert correlation originally from heterogeneous sensors deployed on the whole infrastructure * Real-time analysis of events received by the Prelude Manager
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNameprelude-correlator
PackageSectionadmin
PackageVersion4.1.1-2
SHA-15E50555EABE81790CD53AB250228FE40062270BC
SHA-256E8DC597A6B32EFEB49DE35DFC41E5873F9B54F082A038D50795F6D3D05B74664
Key Value
MD5DBDD3D47F3E93A9BAD93F1DBB5160289
PackageArchnoarch
PackageDescriptionCore files for Prelude Correlator.
PackageMaintainerhttps://bugs.opensuse.org
PackageNameprelude-correlator-core
PackageReleaselp150.1.4
PackageVersion4.0.0
SHA-14718BCB63C9D1EE216EE07CF4E0816870EC6AB8D
SHA-25606B5EBDD0463B6864AA6BE7FA80108A1F86B7E04658E24EF1F2AE99EFBBF9280
Key Value
MD516E1813CA6F7F2FD66AB14282D9C1EE2
PackageArchx86_64
PackageDescriptionPrelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules.
PackageMaintainerFedora Project
PackageNameprelude-correlator
PackageRelease4.el7
PackageVersion4.1.1
SHA-15A278D474982B737DCD199A0A619E9455A94D52B
SHA-2568E67D15A043FFF3B17BBA9CB9E88E4BD3338A120401B1E39B687FDD9949C7874
Key Value
FileSize186384
MD58C4AA34FE600E1B68DA009DE245F9F74
PackageDescriptionSecurity Information and Events Management System [ Correlator ] Prelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules. . The features currently include: * Rapid identification of important security events, enabling the analyst to assign task priorities * Alert correlation originally from heterogeneous sensors deployed on the whole infrastructure * Real-time analysis of events received by the Prelude Manager
PackageMaintainerPierre Chifflier <pollux@debian.org>
PackageNameprelude-correlator
PackageSectionadmin
PackageVersion4.1.1-2
SHA-176EA422B6F5DB5E9F15536BAC170ECF5C0299C2F
SHA-256A5103726EA03BC7A12D6FA5014E244A8F31A6F6932A78D601AD6583C33E4F844
Key Value
MD5A842C2C5A8B7F6800962C21CDE066ACB
PackageArchaarch64
PackageDescriptionPrelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules.
PackageMaintainerFedora Project
PackageNameprelude-correlator
PackageRelease4.el7
PackageVersion4.1.1
SHA-1F48EA1531C8D59613A03D76D23EA95392FCB0108
SHA-2562588CAD248680B89B32A24919CC089ABD0C364CB697017214FE22C7E64463D4A
Key Value
MD56868341BBA0ABF0D5A69BC08C3CCE33B
PackageArchppc64le
PackageDescriptionPrelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules.
PackageMaintainerFedora Project
PackageNameprelude-correlator
PackageRelease4.el7
PackageVersion4.1.1
SHA-15A3D91C38F60CE91B7E900AD5E7F6B48B087FF35
SHA-256D0FA37444A147E8B75089ABBAB03B82F0276A712EEE422A007B12029E63C966E
Key Value
MD573DD6EA468EA17D4A67A145A4B51DE4B
PackageArchnoarch
PackageDescriptionCore files for Prelude Correlator.
PackageMaintainerhttps://bugs.opensuse.org
PackageNameprelude-correlator-core
PackageReleaselp151.2.2
PackageVersion4.0.0
SHA-1D3D447FCB1D4BF0BB98F574C497D32A9CBED3559
SHA-256F4EC86F6B58111974C7033488B2D9DFBE6D89F5BDA3461F3978CC586C8865BA4
Key Value
MD5A7E14429CE1159486B4C993C52502D56
PackageArchppc64
PackageDescriptionPrelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules.
PackageMaintainerFedora Project
PackageNameprelude-correlator
PackageRelease4.el7
PackageVersion4.1.1
SHA-1D0DAE6EDF200A4213029122B2A577D1468472EDF
SHA-2567B87C280E8B699410CAA6A87A9ED2E4F92687C895919181981057FCEBCA7D576