| Key | Value |
|---|---|
| FileSize | 211288 |
| MD5 | 2A690AF347D9AA768CC902ED17C0DED8 |
| PackageDescription | Security Information and Events Management System [ Log Agent ] The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected. |
| PackageMaintainer | Pierre Chifflier <pollux@debian.org> |
| PackageName | prelude-lml |
| PackageSection | admin |
| PackageVersion | 4.1.0-2 |
| SHA-1 | 97A403FAF35CE4E53F49F33F9E6A91D53D5A4EBD |
| SHA-256 | CB15477981819622F0A60286A704F2E560723F3BF3F49A6961FFDDD83C31B5E3 |
| hashlookup:children-total | 16 |
| hashlookup:trust | 50 |
The searched file hash includes 16 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./etc/prelude-lml/prelude-lml.conf |
| FileSize | 6917 |
| MD5 | 4B210089C022CDA5FEEA7F84D448EF59 |
| SHA-1 | 2A4275053E100658A3AABDC4B42FAFFCCCFBEE6D |
| SHA-256 | 1034D4064DA3BA5574B02FA1EAB815AA3CFC27C653A477AB40D3BAB0E06D469F |
| SSDEEP | 192:mKqkehijEnNUiXyB0Xus6vzGUgp4MlO25e:mkSPUsWkOP |
| TLSH | T133E17466D24D373B13CB03A150AEE1DD9B3D904D6E73341262DD98683201E7892FBBE5 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/HACKING.README |
| FileSize | 756 |
| MD5 | 1475976CC703D5CACF83483486774A0B |
| SHA-1 | 2FCBA98BFEAFCEA21E12CAD85F979583F9B51DA0 |
| SHA-256 | 1DB2E6985C825EB5742271954E017E2F8DDEE0A11A022EDDA6F9A00C19F7846C |
| SSDEEP | 12:hBe+oVOrqLRh1y4AvoInFbyE0MevyCmFQMl9Kr1yAHkxbpfgtthcAkU5tDWg2:XywrqLvw49IxM5yCmFjqNHkxNEeAvW |
| TLSH | T19D01D01EF26C62A4198105E17682E3F2660F41DACB324432E257D4C533BBA7E853F5DD |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/changelog.Debian.gz |
| FileSize | 3014 |
| MD5 | E9F0C0666FC932F99FA5A167388FE448 |
| SHA-1 | 44B8C8DFCA878E5AE9B267C22CCAF09494A7EE9C |
| SHA-256 | 3960BF86FC2D94B0BF418C50931A13BEA53B0B567418128A8AD0871CD908D5A6 |
| SSDEEP | 48:XYuPxJB1oFyoclBTxlRlKSmirigY8ZQkbjUMD54wH9T+fbbbR9bK3XKLug+53drm:oObB1OclBT9ovi3Yqmyt+fbbbRVK36YS |
| TLSH | T1E2515DBEC81C5DF10EE92C30C15E5618A62C113EFD8F552074E3C46BB4670AAD5CE684 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/README.Debian |
| FileSize | 517 |
| MD5 | 1298A4E7F1407B397C009E970A0EA593 |
| SHA-1 | 487955E33B167AA2C765B8B1BC951E55608DC0BA |
| SHA-256 | 2FC3B69E22C20B480C2AA5B833AD58E4BB3096BF6AC1D2EEA10F0327426B581B |
| SSDEEP | 12:nkcoBHPyNmY/m5LaR9dEB+EsRFkcvhY1V2kK0huKIcKe/m9:QNKmY/m5LudEB+EsbhCfK0huKIcKeu9 |
| TLSH | T1F9F09EE66DCD788511F0DBEAF022C090D65BFC5E50407131700CE1EE410234C05CE210 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/copyright |
| FileSize | 7030 |
| MD5 | 1CBEF425C9C3FA5C7ADC119185A99A53 |
| SHA-1 | 50CCBF06F6C0F142785409FB58D1E05F9CB09037 |
| SHA-256 | 2298353684BA3A7062161C6E2D1EC4BE3C86396B91B307F5CC1487D34C0970BD |
| SSDEEP | 192:xZPRDLOrXc3vlRH3o13hy5pWo/z4zqeFs:xNRDars3vvXqhUWo/z4zqeFs |
| TLSH | T108E1854E1940C7BB19C01BA0394E95DEE31757EE767EC490105E939EAE0BB3A17F24E4 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/arm-linux-gnueabi/prelude-lml/debug.so |
| FileSize | 9472 |
| MD5 | 90B57C9DBEB300D45C22F2DF2757EB5B |
| SHA-1 | 669EFDD23351DE7FCDAC375BC2FCADC5EFA58BF4 |
| SHA-256 | A6D96E3ADA92A268B5115B9490F5C16DA9A9C0E586D00270650DAB80BCDD60C4 |
| SSDEEP | 96:smz87TBWBc9983lTdfPv/Jwax6EhChfO4+sthQ6z4LNbNgG:hm8H1Tdfn/JwwtChfOv6 |
| TLSH | T1F712A58CF2A67F77E4C1137C60670E513332D8B667DB8B23A50022742D26A74CD2791D |
| Key | Value |
|---|---|
| FileName | ./usr/bin/prelude-lml |
| FileSize | 124476 |
| MD5 | 9D1AD81C637C03F59CB4633DFDA503A5 |
| SHA-1 | 6F001E0EECC0268A30950A57CE732B0A1089F250 |
| SHA-256 | 0BD55BCD0D94065638D77043D1E492AE6A975491A61B26AE5C2184BD70CD18C4 |
| SSDEEP | 3072:MxJ0fmzLaQQd4Q34qiCzGFJl0skjouW8OaC13XTBE:GJ0mzM4Y48EPQu8Oz1z |
| TLSH | T186C32ABAB4809677C9D01375BB9A8768732307FCC2CB7B03DD1486342BD65BD493668A |
| Key | Value |
|---|---|
| FileName | ./lib/systemd/system/prelude-lml.service |
| FileSize | 152 |
| MD5 | 8C583644419BCD84F97511F76D10284A |
| SHA-1 | 9E329CC69398403460EDDA0CDA307153F7980D0A |
| SHA-256 | B1833CB9E3EAE96398A4645ED706256053E9BA15B6EE81F4ABED3BFC2200DD66 |
| SSDEEP | 3:zMZa7+rUSXABlRVGmDMzdK+aQ9sHSdS5czTLESkQmWA1+DRvn:z8tU6wlzGmDMzdK+aG858ILQmWA4Rv |
| TLSH | T1C3C08C29F48064A0980A2AABCE724BA85A504508AF8DF82436A124291AC0656A4348A9 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-lml/changelog.gz |
| FileSize | 130440 |
| MD5 | C491AD306C3874741112AFF482CEDAFF |
| SHA-1 | AEF35D708636EA9C9FAF626B3DC45D38D90497B7 |
| SHA-256 | E7BB2173DA1C8DC2DACD71755C8C78866BEE90C1A10F2B54FF3FBF03C562C1CF |
| SSDEEP | 3072:R9e9lrNLKlL3v4l9coNKg3RS0KGFXGXwKPAnbPq/y/S4ydBFrcj:R9e/rNkzA3YmFBZGASAnbia/S4ydBFrY |
| TLSH | T134D312248439252D54981C96869BFB84DFE6AABA31376F3AF1C2F544782BF4CC670DD0 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/arm-linux-gnueabi/prelude-lml/pcre.so |
| FileSize | 30112 |
| MD5 | 5A0DFC88567A24555EC5A8F7B6F1D0F4 |
| SHA-1 | B8BB174BEE010B3C839CE2E6D210324EC183182D |
| SHA-256 | 6C680B848B315BC0A70541544F99C5FAC475D9B8BE164990A6302FC9A371DA62 |
| SSDEEP | 768:scH/jTAcyh5MBgAE4r44koNWsueSpGTFtPBMyL:scH/jTAcyhus4RNWspSpGrCy |
| TLSH | T1B5D2B6DBA151DABEC7C046B5FBA98B1C733353B4C1CABF01C504C1B43F96A694E26A46 |