| Key | Value |
|---|---|
| FileSize | 194300 |
| MD5 | 07CCF792F7774216F36D400553F7A45F |
| PackageDescription | Security Information and Events Management System [ Correlator ] Prelude-Correlator allows conducting multi-stream correlations thanks to a powerful programming language for writing correlation rules. With any type of alert able to be correlated, event analysis becomes simpler, quicker and more incisive. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules. . The features currently include: * Rapid identification of important security events, enabling the analyst to assign task priorities * Alert correlation originally from heterogeneous sensors deployed on the whole infrastructure * Real-time analysis of events received by the Prelude Manager |
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | prelude-correlator |
| PackageSection | admin |
| PackageVersion | 5.1.0+ds-2 |
| SHA-1 | AA3AAFCA6CABF6741421D0ED50445D6A41A546D7 |
| SHA-256 | 8DBEAD7080DF683A6DCA58FFDEF3BA4A48BD8DCAA7A12E09B93E164DC559837C |
| hashlookup:children-total | 43 |
| hashlookup:trust | 50 |
The searched file hash includes 43 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/EventSweepPlugin.py |
| FileSize | 2557 |
| MD5 | 438F3FBF4D84969AD190217F9BF1C5ED |
| SHA-1 | 0F343FF6FAE76228E447377A03EFBCD68F62A9A2 |
| SHA-256 | 9CF39AC46A292F147E979EAD9E564AB97D9153E588C1D84C4EF1ACD768B1A798 |
| SSDEEP | 48:efyajvqCgHDg4yUjHTYyZVY1ZN8HFoTJc7ICsPlZGUA3:efy8QHEwT/ZMZGoc7ItPTGp3 |
| TLSH | T1D851CA4E5520DEB0190906B5118BA1D9332549D3EA6F5C1CBC2EC24EAFE9EB782715EC |
| Key | Value |
|---|---|
| FileName | ./var/lib/prelude-correlator/prelude-correlator/spamhaus_drop.dat |
| FileSize | 23462 |
| MD5 | 2E8B0769E7870B126E9443938EF8DBF2 |
| SHA-1 | 19CB1831C2D535E48F682AF417260AAB7C958A90 |
| SHA-256 | BA1C8C20EAD1C3F2806E33C5395C7F2C1AA3AEB5DA2FD103092C21D60350DE9E |
| SSDEEP | 384:jmrtXIiAhWpChsVsSuTlejtz5mupgJWGt8r/KB9dsv/Tef80mLuIVC3qKclFe6Tn:jg4PPNJz/u |
| TLSH | T1C5B235F1AEF51AFF88E0609BD63FC639B117A5C1B1E2B7525F4F2214781A480762F918 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-correlator/NEWS.gz |
| FileSize | 6082 |
| MD5 | 06B72A4C03B7B85C239976395193E9F8 |
| SHA-1 | 1A08393DC8A21A74A5E31562C3C3228964096063 |
| SHA-256 | C981CA326174F443AA776379896D3861A8B3AAECF2D3F070ED97C066A72C35BF |
| SSDEEP | 96:3uZoBuB8utk75ghIkKhVo/vtjFI/XedteXGFP7nYBdYjCJY+RC9DYXZsJuapR+t:3uZoBuBftkFEIHU92iUPBdYInmJuaT+t |
| TLSH | T11BC1AFA1775F9885825AAB9CE3662E5431CE8E411979D3B20470B02E70F6CBB915F153 |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/WormPlugin.py |
| FileSize | 3357 |
| MD5 | B3C6B0D1AB042B4E768EBAAEC4FEC5F0 |
| SHA-1 | 1D31FBF8F13ECB795099849F589E2C8F005BB4E2 |
| SHA-256 | 41034847A0810EF3406111A67CB61CCD4D487DBD7FA27C19C72B49E5D3013441 |
| SSDEEP | 96:efy8mEwT+xpn31ZQKhz/r7/N/Kv9OZGFB:Ay8LwT+731xjV/i4c |
| TLSH | T1B961A85D1320DFB6668302B2208BB2E67315C6E3461B6C2C796DC29C6FA2DB541739F8 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-correlator/README |
| FileSize | 1469 |
| MD5 | D43BB1AEDD4B132D74AF55A2333CC08B |
| SHA-1 | 1D813BC8C0AB93192F22EFC0C7462CC2C31993DF |
| SHA-256 | 904DA691F8AA23E21AEB10BE8B9654B3BB2579CFB96F4906FCCA0A91EB8F4BD8 |
| SSDEEP | 24:GCAjsweseF7FPA+nTF0fy1XICQrEKZQaIJkt8MswCHJfVKcDwaq+ygXK:GDjsweseFzFV1XrKZQ3kt8DXJfVsX |
| TLSH | T15331EBFFB734326060412288B256E8E5CB6371EEA39065B6B89C64D1732635CD636AC5 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3/dist-packages/preludecorrelator/main.py |
| FileSize | 10629 |
| MD5 | 0FE9E4DFE4E6257A2436AF5915C1F560 |
| SHA-1 | 1EC19FA41C50FF15BB484C1301D7A0463AB727C8 |
| SHA-256 | D57B9C96E678BB5ABBBC91986FF301217B1DF1099BC63A8B42E601F07E25139D |
| SSDEEP | 96:lpEwTO8qMBRtkVpJbF+WDalRNchMk4nhLugyEYzh+45KUfhMMLlxnRjEVKEbK6Im:8wTOTpF+E5LEgfM2Rza1kaC2/pjlz |
| TLSH | T1C42286A5041E552393479AAE9483E453533AAA97A21A543034FC67CC7F85431C3F3FFA |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/DshieldPlugin.py |
| FileSize | 3536 |
| MD5 | 911A6228F1B4C7F0AC711DC78102B526 |
| SHA-1 | 2A3C499F9B005C9DAA00E17F8612BE60FE1573E6 |
| SHA-256 | FD25F1CCE4332857A9F62D2F7EC6AACEFFF3926C03F567C81916994567616970 |
| SSDEEP | 96:efy/lHEwTATFd08rQQBfTO1MMpy686PHiH:AySwTJ8RipPrviH |
| TLSH | T12C71B7BF157AC9929783528665CA20C1332DB6C3801F8044FEBCE288BFA4D71C2B1DD5 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/prelude-correlator/copyright |
| FileSize | 2524 |
| MD5 | 1BE755677BEEB9D19F44C469C8C2544A |
| SHA-1 | 3379CB4D5B3511623DC29A7CCA518800B3391B4D |
| SHA-256 | 62DDE26E27A68F53D1260BC315A4EC1E69D2A8D2BC495327BEB4790E946BE3E7 |
| SSDEEP | 24:gtt0hVGKlcsQwCNKjQsJ4rVqNVxiGfyZOkqoTbVCHtQHm5l7KqWHfyZOkqoTbVCb:rjCwCeTuVqXwCyn0Hz7uqWyn0Hz75qs |
| TLSH | T13C51218D4990C77F15C02A90398B99DEB31A5BEFB5AEC090724E479EDE07F7113A14D8 |
| Key | Value |
|---|---|
| FileName | ./usr/lib/python3.6/site-packages/prelude_correlator-5.2.0-py3.6.egg-info/top_level.txt |
| FileSize | 18 |
| MD5 | 4C1B85996D2C81D75A00CC386398B8EE |
| SHA-1 | 3EFA2415EEFFD8DCBA452932496255FE9A3FC059 |
| SHA-256 | 4F208AF8428D6B4AEBF422E943DD796D09B5CFB8FBFA72B35CE1270419D1BD6F |
| SSDEEP | 3:iJHXQJfn:iJ3Qp |
| TLSH |
| Key | Value |
|---|---|
| FileName | ./etc/prelude-correlator/rules/python/FirewallPlugin.py |
| FileSize | 4391 |
| MD5 | DD4DB11275CA013C81513A8CA1ED2E26 |
| SHA-1 | 5198AB23108A2112E79878B7CBA22B2E69238CD8 |
| SHA-256 | C39680247F2072A9158F8D15BE209F4E5553CB2CBF6AB432423B09DE350243FF |
| SSDEEP | 96:efyxjpEwTGzV+4ZesFMjQ4Zx+ZaSmhAcz+Y+Q:AyxawTEZ7FMvZx2Vlc |
| TLSH | T11C91754EC670D5F3128A01661587D6C7F308ACE7AA4B6C9C7EACC24C2FB1872E575898 |