prelude-lml-rules-check

Security Information and Events Management System [ LML Rules ]

Install

All systems
curl cmd.cat/prelude-lml-rules-check.sh
Debian Debian
apt-get install prelude-lml-rules
Ubuntu
apt-get install prelude-lml-rules
image/svg+xml Kali Linux
apt-get install prelude-lml-rules
Fedora
dnf install prelude-lml-rules
Windows (WSL2)
sudo apt-get update sudo apt-get install prelude-lml-rules

prelude-lml-rules

Security Information and Events Management System [ LML Rules ]

The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected. This package contains all rules (or signatures) for Prelude LML.