| Key | Value |
|---|---|
| MD5 | 64EAEE2F894A985AE78455FAA4F093F0 |
| PackageArch | x86_64 |
| PackageDescription | The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports log files in the BSD syslog format and is able to analyze any log file by using the PCRE library. It can apply log file specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected. |
| PackageMaintainer | Fedora Project |
| PackageName | prelude-lml |
| PackageRelease | 1.el7 |
| PackageVersion | 5.2.0 |
| SHA-1 | 4439DD613705DA01419B01F29CEFFD5E0C2C8B75 |
| SHA-256 | E432BAC49E6BCCECA42220322D17EE25CF0EBDAA251AC4D6D071D1CE7E7741CE |
| hashlookup:children-total | 10 |
| hashlookup:trust | 50 |
The searched file hash includes 10 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./etc/prelude-lml/plugins.rules |
| FileSize | 836 |
| MD5 | 446480A94DE7E09917ACD9C48361234B |
| SHA-1 | CCC52AC2BE9F8DCFFA54115CD8F46FC7995DC8D5 |
| SHA-256 | 6E009A53AD344BD1563EA2A2B79A8D3F53886948567979355EA3FCCD2C3F6BF9 |
| SSDEEP | 24:SslZ+0CJBxd1ayS3EPSR0LSjTWdEkoF7lS5EPgLRSaAgm:S++0CJBX1ayS3yS+LSncEnS5ygLqgm |
| TLSH | T172014C1F878D253101E584E23099E1D9462AD2D9ABF0E091F7DE855C6B3497E51A9D40 |
| tar:gname | bin |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib/systemd/system/prelude-lml.service |
| FileSize | 138 |
| MD5 | 6418C224E5053F6383BDB625BB5AB03F |
| SHA-1 | 213258946530DD5C99AD5F1030A6620935523DE7 |
| SHA-256 | 1BF3E17E9BF20FD5E70A41860F89C56381512EBBC3487F767031422136046939 |
| SSDEEP | 3:zMZa7+rUSXABlRVGmDMzdK+aQmMSv2rSkQmWA1+DRvn:z8tU6wlzGmDMzdK+aBJcLQmWA4Rv |
| TLSH | T14DC02B25F440B0B1980B2EABCE3247A849104648EF8CF4207AB2142D06C450A94300BD |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/packages/prelude-lml/HACKING.README |
| FileSize | 780 |
| MD5 | CE979EC4C4C9FD55949BA6867F0EB356 |
| SHA-1 | 2D6ACFF0197B79132F46DBE5FAFAC14975C0E1F0 |
| SHA-256 | 5CE75927A9FE75588107C5E2A7BF5979807A22A5AA9F21DFB3EB7497F9FB6DDB |
| SSDEEP | 12:hBe+oVOrqLRh15X2voInFi2yE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvzHIE2M5yCmFjqNHkxNEeAvW |
| TLSH | T13E01F11EF36C62A8254609917282E3F6A20F41DACB214431E116D4C533BAA7E853F5DD |
| Key | Value |
|---|---|
| FileName | ./usr/lib64/prelude-lml/pcre.so |
| FileSize | 37432 |
| MD5 | 96F4020081EA7CD65A50E9FAEBAC8C88 |
| SHA-1 | 9B258E4C1F48C2D798720352567C9EB609B0DBF0 |
| SHA-256 | 13B0E872386DC66CBBCB753159EBA0AD68020890D28801AD428EE975ACE083C3 |
| SSDEEP | 768:ekXncP/FBHXxlflMxpfQ26kESwt0kVO5jh4uRsv:x3cP/FBHXezhsNRQhh4Usv |
| TLSH | T167F2494FB69249FCC4A583748967D7617E707056D3009A3A7A44A7786A02F388F2FA37 |
| Key | Value |
|---|---|
| FileName | ./usr/sbin/prelude-lml |
| FileSize | 136552 |
| MD5 | A0A86F1EC788BF9210C6D21F82E64770 |
| SHA-1 | C69C1B12BF89BF5BCEBBB99DB703C65302C66453 |
| SHA-256 | 3B2C36C194E63F2F510355E96A779362A4F6FFFFB4EF368B39467F7097E7D01A |
| SSDEEP | 3072:b7jFwcjkC8rQANbsRgciJkQIlHtxb7lGbg0M3C:b7JYQtgEQIF7yM3 |
| TLSH | T1C7D37D8B76D25DFCC4C2C930499BE2617A31B524D721AA3F38849A382D19F5C1E6F739 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/tmpfiles.d/prelude-lml.conf |
| FileSize | 36 |
| MD5 | 6E1EE4B44ECA83D673275BFBAAC16AEE |
| SHA-1 | 6DB5DE0E9DCA111560CF6026AFE4E1D873F90E62 |
| SHA-256 | 65B86C577B7A26A43656ACC949EF66D04844AA7EF114CF8428019DD33D182953 |
| SSDEEP | 3:kQe4VjP3HWn:kQldP3HW |
| TLSH |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/packages/prelude-lml/README |
| FileSize | 1742 |
| MD5 | A5924B09DE4B82B6F15A5BE943CA79F2 |
| SHA-1 | CBF9D34C6A6077CE6250E1E681663EBFF1E19795 |
| SHA-256 | E36B8D95200965696F8FB79B0338C070E7A370B6B52F1227F7187AC201B3B4E0 |
| SSDEEP | 24:ykwdzTaLVNECo7w5QlXlunfy1XICIrYKZQgDnJkt8MswCHJfVKcDwaq+ygXA:SwECo7Hlua1XtKZQg1kt8DXJfVsP |
| TLSH | T1AE3116FFA2687270734525C87216E0FBCBA375AEE2602571FC9C94D5632A39C4236B85 |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-lml/prelude-lml.conf |
| FileSize | 7191 |
| MD5 | 9F413DD828C3D401762CECA4E2CFC919 |
| SHA-1 | 3200F3F42A0E4F69CADCE4AF0D8E14A8675C0503 |
| SHA-256 | FC654F5231D96AEB077CD59B575F729FD8BCE12F7D216BD4316727488150E851 |
| SSDEEP | 192:mKqkehijEnNUiMyB0Xus6vzGogpcNadGSO25e:mkSkUsW+OP |
| TLSH | T12DE17566D24D363B13CF13A150AEE2DD9B3D904D6E73302162DD98687201E7892FBBE5 |
| Key | Value |
|---|---|
| CRC32 | 4E46F4A1 |
| FileName | ./usr/share/cmake/Templates/fedora/gpl-2.0.txt |
| FileSize | 18092 |
| KnownMalicious | malshare.com |
| MD5 | B234EE4D69F5FCE4486A80FDAF4A4263 |
| OpSystemCode | 362 |
| ProductCode | 15109 |
| RDS:package_id | 313212 |
| SHA-1 | 4CC77B90AF91E615A64AE04893FDFFA7939DB84C |
| SHA-256 | 8177F97513213526DF2CF6184D8FF986C675AFB514D4E68A404010521B880643 |
| SHA-512 | AEE80B1F9F7F4A8A00DCF6E6CE6C41988DCAEDC4DE19D9D04460CBFB05D99829FFE8F9D038468EABBFBA4D65B38E8DBEF5ECF5EB8A1B891D9839CDA6C48EE957 |
| SSDEEP | 384:ghUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:gmFWixMFzMdm7jUI |
| SpecialCode | |
| TLSH | T13A82A42E770443F205C202A16A4F68DFA32AD5B9723E1155386DC15E236FE35C3BFA99 |
| db | nsrl_legacy |
| insert-timestamp | 1728991626.679368 |
| mimetype | text/plain |
| nsrl-sha256 | rds241-sha256.zip |
| source | snap:MmD5jWldYNMNgb2rFFht3FNKGJx1FLLV_613 |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/lib64/prelude-lml/debug.so |
| FileSize | 11256 |
| MD5 | FADC27AC8A40708B508E694654908095 |
| SHA-1 | B1CFA9C4298FB8EF2065F30EB62CB46ABF4C6B08 |
| SHA-256 | 27DD889E22B8AAA584E7252D24FCDAC548935AEB9AC09E4FC2E59ABC15562BEA |
| SSDEEP | 96:R1Q8BWBPtE9fmtKHINEkGCflgdGjdkfNeu+OaHokTWDl+aqv8iy3W:RS88pwAN/9jnLhHaD8 |
| TLSH | T19432DA0BB6744B7FC994973440BB8A702771A4CADB7383373964617439823A84B676FE |