[ANNOUNCE]: prelude-lml 0.9.13

Yoann Vandoorselaere <[email protected]> Thu, 21 Aug 2008 16:53:02 +0200
Newsgroups gmane.comp.security.ids.prelude.user,gmane.comp.security.ids.prelude.devel
Message-ID <1219330382.6784.41.camel@arwen>
We are pleased to announce the availability of Prelude-LML 0.9.13.

Prelude-LML is a signature based log analyzer monitoring logfile and
received syslog messages for suspicious activity. It handle events
generated by a large set of components, including but not limited to:
BigIP, Grsecurity, Honeyd, ipchains, Netfilter, ipfw, Nokia ipso,
Nagios, Norton Antivirus Corporate Edition, NTsyslog, PAM, Portsentry,
Postfix, Proftpd, ssh, etc.


------[ CHANGES ]------

- ModSecurity ruleset rewrite, by Peter Vrabec <[email protected]> and
Dan Kopecek <[email protected]>. This ruleset handle ModSecurity 2.0
output. (Fix #216).

- New rulesets for FreeBSD su attempts, by Alexander Afonyashin
<[email protected]>
(Fix #304).

- Add additional format to the default configuration to deal with
apache 
error_log file format, by Alexander Afonyashin <[email protected]> (Fix
#307).

- Normalize some classification: introduce Remote Login, and 
Credentials Change. Cleanup SSH ruleset, and remove duplicated rules.

- Automated regression tests on make check.


------[ SUPPORT ] ------

Improving Prelude is costly, but you can help! We are looking for
organizations that find Prelude useful and wish to contribute back.

Commercial support contracts for Prelude are available, and they help
finance continued maintenance. PreludeIDS Technologies, a privately held
company, is currently funding Prelude maintenance.


------[ DOWNLOAD ]------

http://www.prelude-ids.com/development/download/


------[ CHECKSUM ]------

MD5 : 310649089740e93916af60840e405928
SHA1 : ee0805e43fcf583d8d7bd13c5e92428a8d578605
SHA256 :
994a9825077c8f480e78ad9e83a5d86dc67ce40311460ba7d518cc423acddfe4


------[ OpenPGP key ]------

gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
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=CFJR
-----END PGP SIGNATURE-----

-- 
Yoann Vandoorselaere | Responsable R&D / CTO | PreludeIDS Technologies
Tel: +33 (0)8 70 70 21 58                  Fax: +33(0)4 78 42 21 58
http://www.prelude-ids.com

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user