Result for 59E320698545E4F6424DB61D5C81E142DF70DD6C

Query result

Key Value
FileName./usr/lib/i386-linux-gnu/prelude-manager/filters/thresholding.so
FileSize13564
MD5702F89F8F989441649219A5998ED711B
SHA-159E320698545E4F6424DB61D5C81E142DF70DD6C
SHA-256269DA7C13A124BE6C507AC890DFC4EFDB5E73EBC48CF4B26D482F1A239B31A15
SSDEEP384:RhSKOAuggTjNltlgJGriXyQtKu1d/7jXBD0qV/Yzke:RZyfTRlHg+x+zBD0qBYz
TLSHT1A3520817BB9AEEB1F1C107B8074B5AA5B1315449E6E3C4B2BA05339C34B73249DA31BD
hashlookup:parent-total1
hashlookup:trust55

Network graph view

Parents (Total: 1)

The searched file hash is included in 1 parent files which include package known and seen by metalookup. A sample is included below:

Key Value
FileSize106872
MD535DCDFECBBA11D3B0D31094D955B2323
PackageDescriptionSecurity Information and Events Management System [ Manager ] Prelude Manager is the main program of the Prelude SIEM suite. It is a multithreaded server which handles connections from the Prelude sensors. It is able to register local or remote sensors, let the operator configure them remotely, receive alerts, and store alerts in a database or any format supported by reporting plugins, thus providing centralized logging and analysis. The IDMEF standard is used for alert representation. Support for filtering plugins allows you to hook in different places in the Manager to define custom criteria for alert relaying and logging. . This package provides the Prelude Manager, which is a high availability server that accepts secured connections from distributed sensors or other managers and saves received events to a media specified by the user (database, log files, mail, etc).
PackageMaintainerUbuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
PackageNameprelude-manager
PackageSectionadmin
PackageVersion4.1.1-2
SHA-17A7225228A5E1356CBCD50D71B2408886F0D07F1
SHA-25608CB3CF59D057E908A64019A55A0F2F156A1C3CD523EC3135F1E33849290F20D