| Key | Value |
|---|---|
| MD5 | 03EB5C5CB438F3ABCDC11E953C3BFA01 |
| PackageArch | armv7hl |
| PackageDescription | Prelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules. |
| PackageMaintainer | Fedora Project |
| PackageName | prelude-correlator |
| PackageRelease | 2.fc32 |
| PackageVersion | 5.1.0 |
| SHA-1 | 6C6F34C344B5DD26FEA80EAFB54A916263CF96AE |
| SHA-256 | C69152E0665D15767505E53D8359F8245A62E9DC4C7B907A8F2149B51FD81DD9 |
| hashlookup:children-total | 22 |
| hashlookup:trust | 50 |
The searched file hash includes 22 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/EventSweepPlugin.py |
| FileSize | 2557 |
| MD5 | 438F3FBF4D84969AD190217F9BF1C5ED |
| SHA-1 | 0F343FF6FAE76228E447377A03EFBCD68F62A9A2 |
| SHA-256 | 9CF39AC46A292F147E979EAD9E564AB97D9153E588C1D84C4EF1ACD768B1A798 |
| SSDEEP | 48:efyajvqCgHDg4yUjHTYyZVY1ZN8HFoTJc7ICsPlZGUA3:efy8QHEwT/ZMZGoc7ItPTGp3 |
| TLSH | T1D851CA4E5520DEB0190906B5118BA1D9332549D3EA6F5C1CBC2EC24EAFE9EB782715EC |
| Key | Value |
|---|---|
| FileName | ./var/lib/prelude-correlator/prelude-correlator/spamhaus_drop.dat |
| FileSize | 23462 |
| MD5 | 2E8B0769E7870B126E9443938EF8DBF2 |
| SHA-1 | 19CB1831C2D535E48F682AF417260AAB7C958A90 |
| SHA-256 | BA1C8C20EAD1C3F2806E33C5395C7F2C1AA3AEB5DA2FD103092C21D60350DE9E |
| SSDEEP | 384:jmrtXIiAhWpChsVsSuTlejtz5mupgJWGt8r/KB9dsv/Tef80mLuIVC3qKclFe6Tn:jg4PPNJz/u |
| TLSH | T1C5B235F1AEF51AFF88E0609BD63FC639B117A5C1B1E2B7525F4F2214781A480762F918 |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/WormPlugin.py |
| FileSize | 3357 |
| MD5 | B3C6B0D1AB042B4E768EBAAEC4FEC5F0 |
| SHA-1 | 1D31FBF8F13ECB795099849F589E2C8F005BB4E2 |
| SHA-256 | 41034847A0810EF3406111A67CB61CCD4D487DBD7FA27C19C72B49E5D3013441 |
| SSDEEP | 96:efy8mEwT+xpn31ZQKhz/r7/N/Kv9OZGFB:Ay8LwT+731xjV/i4c |
| TLSH | T1B961A85D1320DFB6668302B2208BB2E67315C6E3461B6C2C796DC29C6FA2DB541739F8 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/packages/prelude-correlator/NEWS |
| FileSize | 17216 |
| MD5 | 9FA57560F9FF7B1748AE4854386DDDB6 |
| SHA-1 | 28C2D3930919BC88533EAE50F21B6225B6F32965 |
| SHA-256 | 23B119EF5E18826502B1ACFDE8A9FF71E0FE10F3DD1DDF347A3FFAC581BFAE85 |
| SSDEEP | 384:MAQJMpN4mtKUdLA+pR+Y9DQFBKmWOgyrx:7+wHvWmOgw |
| TLSH | T16072A8E277343722799227A6D2CB41D97718A1EB9233D0347B9895C87A03063D3776CB |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/DshieldPlugin.py |
| FileSize | 3536 |
| MD5 | 911A6228F1B4C7F0AC711DC78102B526 |
| SHA-1 | 2A3C499F9B005C9DAA00E17F8612BE60FE1573E6 |
| SHA-256 | FD25F1CCE4332857A9F62D2F7EC6AACEFFF3926C03F567C81916994567616970 |
| SSDEEP | 96:efy/lHEwTATFd08rQQBfTO1MMpy686PHiH:AySwTJ8RipPrviH |
| TLSH | T12C71B7BF157AC9929783528665CA20C1332DB6C3801F8044FEBCE288BFA4D71C2B1DD5 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/packages/prelude-correlator/AUTHORS |
| FileSize | 128 |
| MD5 | 32AAD8CED8E624DBAE0EEF31DD5C5DA2 |
| SHA-1 | 2DCA4EF98E77B78023183690BE189F207D0CBEB5 |
| SHA-256 | 9F03F7E1D1DA2CC073BA5352210820D7FCF8E8BD72D849D0BA20003D958A51D9 |
| SSDEEP | 3:L2bKgJEiMEuR9j9Vf0S4ie82ZsM+aENzpzeLKbvn:L2rQEe59J4r82aaeNLn |
| TLSH | T1A5B02BCC166031372C0388083252C9E3014038E186FC8090B610D0C275330015400242 |
| Key | Value |
|---|---|
| CRC32 | 4E46F4A1 |
| FileName | usr/share/doc/vifm/COPYING |
| FileSize | 18092 |
| KnownMalicious | malshare.com |
| MD5 | B234EE4D69F5FCE4486A80FDAF4A4263 |
| OpSystemCode | 362 |
| ProductCode | 15109 |
| RDS:package_id | 318968 |
| SHA-1 | 4CC77B90AF91E615A64AE04893FDFFA7939DB84C |
| SHA-256 | 8177F97513213526DF2CF6184D8FF986C675AFB514D4E68A404010521B880643 |
| SHA-512 | AEE80B1F9F7F4A8A00DCF6E6CE6C41988DCAEDC4DE19D9D04460CBFB05D99829FFE8F9D038468EABBFBA4D65B38E8DBEF5ECF5EB8A1B891D9839CDA6C48EE957 |
| SSDEEP | 384:ghUwi5rpL676yV12rPd34ZomzM2FR+dWF7jUI:gmFWixMFzMdm7jUI |
| SpecialCode | |
| TLSH | T13A82A42E770443F205C202A16A4F68DFA32AD5B9723E1155386DC15E236FE35C3BFA99 |
| db | nsrl_legacy |
| insert-timestamp | 1735817250.2027707 |
| mimetype | text/plain |
| nsrl-sha256 | rds241-sha256.zip |
| source | snap:OtzMxnIemajqYJlxNY3Ed4r6TROQn7lo_813 |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/packages/prelude-correlator/HACKING.README |
| FileSize | 770 |
| MD5 | 4022F3C9167B8E3F4F00AB7463FC72D9 |
| SHA-1 | 4CDCF00FC5E307B193B88F9B3F2F9AE24A895A02 |
| SHA-256 | AC6E0BBCBD0C7DB39C5E7EDBDB02F995C3763D2605EFD3B40272ED2CCC7ECE8A |
| SSDEEP | 12:hBeVtOrqLRh1y4A4gnFbyE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XG4rqLvw4PgxM5yCmFjqNHkxNEeAvW |
| TLSH | T12101F11EF26C2264184105A17682E3E2620B41DA8B319432B206D4C573BBA7E853F5DD |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/FirewallPlugin.py |
| FileSize | 4391 |
| MD5 | DD4DB11275CA013C81513A8CA1ED2E26 |
| SHA-1 | 5198AB23108A2112E79878B7CBA22B2E69238CD8 |
| SHA-256 | C39680247F2072A9158F8D15BE209F4E5553CB2CBF6AB432423B09DE350243FF |
| SSDEEP | 96:efyxjpEwTGzV+4ZesFMjQ4Zx+ZaSmhAcz+Y+Q:AyxawTEZ7FMvZx2Vlc |
| TLSH | T11C91754EC670D5F3128A01661587D6C7F308ACE7AA4B6C9C7EACC24C2FB1872E575898 |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/EventScanPlugin.py |
| FileSize | 2171 |
| MD5 | 8A8CCDF51B38EDAC1707CA548DEC8774 |
| SHA-1 | 68BFFA479AFA1827E302A1E7F008960186FD3B08 |
| SHA-256 | FD1A46CF78AE4786B07A676810A4D02F5C20A6CBE5FC8A032B8E0377326D4B5A |
| SSDEEP | 48:efyajvRWgHDg4yUjHTYyFIZN8rF2TtWSCsFEP:efy8/HEwT/qZuuWStF0 |
| TLSH | T19141B84E9220DAB0180806B5114B92DC732947C3566E5C08BD1C838D6FE5EB281719EC |