[ 原始碼： prelude-lml-rules ]
套件：prelude-lml-rules（5.2.0-1）
prelude-lml-rules 的相關連結
Debian 的資源：
下載原始碼套件 prelude-lml-rules：
- [prelude-lml-rules_5.2.0-1.dsc]
- [prelude-lml-rules_5.2.0.orig.tar.gz]
- [prelude-lml-rules_5.2.0.orig.tar.gz.asc]
- [prelude-lml-rules_5.2.0-1.debian.tar.xz]
維護者：
外部的資源：
- 主頁 [www.prelude-siem.org]
相似套件：
Security Information and Events Management System [ LML Rules ]
The Prelude Log Monitoring Lackey (LML) is the host-based sensor program part of the Prelude SIEM suite. It can act as a centralized log collector for local or remote systems, or as a simple log analyzer (such as swatch). It can run as a network server listening on a syslog port or analyze log files. It supports logfiles in the BSD syslog format and is able to analyze any logfile by using the PCRE library. It can apply logfile-specific analysis through plugins such as PAX. It can send an alert to the Prelude Manager when a suspicious log entry is detected.
This package contains all rules (or signatures) for Prelude LML.