Re: EDR
Gil ANDRE via slackware <[email protected]> Thu, 27 Oct 2022 14:57:55 +0200
| Newsgroups | gmane.linux.slackware |
|---|---|
| Message-ID | <[email protected]> |
--===============3069673061520009896== Content-Type: multipart/alternative; boundary=----SAU6TI1B8RQZBFE5NICF5BUQQ53WHZ Content-Transfer-Encoding: 7bit ------SAU6TI1B8RQZBFE5NICF5BUQQ53WHZ Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable OSSEC works very well on Slackware, I have been using it for a long time=2E Wazuh is also very good, is a fork of OSSEC, but it requires a lot more wo= rk, since it drags a whole ELK stack=2E Both are not EDR, though, you should look at things like Dark Trace, Tehtr= is or Harfang Labs if you really want an EDR=2E On October 27, 2022 2:13:45 PM GMT+02:00, Thomas Altfather Good via slackw= are <slackware@mailman=2Elug=2Eorg=2Euk> wrote: >Thanks Gabriel, this is very helpful=2E > >Cheers > >-- > >Thomas Altfather Good >thomasgood=2Ecom > > >Washington-Baltimore News Guild, CWA Local 32035 >National Press Photographers Association > >Level 6, Google Guide: google=2Ethomasgood=2Ecom > > >=E2=80=9ELeben Sie jetzt die Fragen=2E=E2=80=9C -- Rainer Maria Rilke > > > > >On Thu, Oct 27, 2022, 08:02 Gabriel D=C3=ADaz L=C3=B3pez de la Llave via = slackware < >slackware@mailman=2Elug=2Eorg=2Euk> wrote: > >> hello >> >> Wazuh is open source and can be integrated with many environments=2E It= does >> not support Slackware natively, but I=E2=80=99m sure it can be adapted= =2E >> >> https://github=2Ecom/wazuh/wazuh >> >> There is a very active slack community where you can interact with othe= r >> people using it=2E >> >> https://wazuh=2Ecom/community/join-us-on-slack/ >> >> gabriel >> >> >> >> El 27 oct 2022, a las 13:54, Thomas Altfather Good via slackware < >> slackware@mailman=2Elug=2Eorg=2Euk> escribi=C3=B3: >> >> >> Hi All, >> >> Has anyone gotten SentinelOne to work with Slackware? >> >> Or - can someone recommend an EDR? >> >> Thanks! >> -- >> >> Thomas Altfather Good >> thomasgood=2Ecom >> >> >> Washington-Baltimore News Guild, CWA Local 32035 >> National Press Photographers Association >> >> Level 6, Google Guide: google=2Ethomasgood=2Ecom >> >> >> =E2=80=9ELeben Sie jetzt die Fragen=2E=E2=80=9C -- Rainer Maria Rilke >> >> >> >> -- >> slackware mailing list >> slackware@mailman=2Elug=2Eorg=2Euk >> https://mailman=2Elug=2Eorg=2Euk/mailman/listinfo/slackware >> >> >> -- >> slackware mailing list >> slackware@mailman=2Elug=2Eorg=2Euk >> https://mailman=2Elug=2Eorg=2Euk/mailman/listinfo/slackware >> --=20 Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------SAU6TI1B8RQZBFE5NICF5BUQQ53WHZ Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head></head><body>OSSEC works very well on Slackware, I have been us= ing it for a long time=2E<br><br>Wazuh is also very good, is a fork of OSSE= C, but it requires a lot more work, since it drags a whole ELK stack=2E<br>= <br>Both are not EDR, though, you should look at things like Dark Trace, Te= htris or Harfang Labs if you really want an EDR=2E<br><br><div class=3D"gma= il_quote">On October 27, 2022 2:13:45 PM GMT+02:00, Thomas Altfather Good v= ia slackware <slackware@mailman=2Elug=2Eorg=2Euk> wrote:<blockquote c= lass=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0=2E8ex; border-left: 1px= solid rgb(204, 204, 204); padding-left: 1ex;"> <div dir=3D"auto">Thanks Gabriel, this is very helpful=2E<div dir=3D"auto"= ><br></div><div dir=3D"auto">Cheers<br><br><div data-smartmail=3D"gmail_sig= nature" dir=3D"auto">--<br><br>Thomas Altfather Good<br><a href=3D"http://t= homasgood=2Ecom">thomasgood=2Ecom</a><br><br><br>Washington-Baltimore News = Guild, CWA Local 32035<br>National Press Photographers Association<br><br>L= evel 6, Google Guide: <a href=3D"http://google=2Ethomasgood=2Ecom">goo= gle=2Ethomasgood=2Ecom</a><br><br><br>=E2=80=9ELeben Sie jetzt die Fragen= =2E=E2=80=9C -- Rainer Maria Rilke<br><br><br> </div= ></div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail= _attr">On Thu, Oct 27, 2022, 08:02 Gabriel D=C3=ADaz L=C3=B3pez de la Llave= via slackware <<a href=3D"mailto:slackware@mailman=2Elug=2Eorg=2Euk">sl= ackware@mailman=2Elug=2Eorg=2Euk</a>> wrote:<br></div><blockquote class= =3D"gmail_quote" style=3D"margin:0 0 0 =2E8ex;border-left:1px #ccc solid;pa= dding-left:1ex"><div style=3D"line-break:after-white-space">hello<div><br><= /div><div>Wazuh is open source and can be integrated with many environments= =2E It does not support Slackware natively, but I=E2=80=99m sure it can be = adapted=2E </div><div><br></div><div><a href=3D"https://github=2Ecom/w= azuh/wazuh" target=3D"_blank" rel=3D"noreferrer">https://github=2Ecom/wazuh= /wazuh</a></div><div><br></div><div>There is a very active slack community = where you can interact with other people using it=2E </div><div><br></= div><div><a href=3D"https://wazuh=2Ecom/community/join-us-on-slack/" target= =3D"_blank" rel=3D"noreferrer">https://wazuh=2Ecom/community/join-us-on-sla= ck/</a><br></div><div></div><div><br></div><div>gabriel</div><div><br></div= ><div><br><div><br><blockquote type=3D"cite"><div>El 27 oct 2022, a las 13:= 54, Thomas Altfather Good via slackware <<a href=3D"mailto:slackware@mai= lman=2Elug=2Eorg=2Euk" target=3D"_blank" rel=3D"noreferrer">slackware@mailm= an=2Elug=2Eorg=2Euk</a>> escribi=C3=B3:</div><br><div><div dir=3D"auto">= <br>Hi All, <div dir=3D"auto"><br></div><div dir=3D"auto">Has anyone g= otten SentinelOne to work with Slackware?</div><div dir=3D"auto"><br></div>= <div dir=3D"auto">Or - can someone recommend an EDR?</div><div dir=3D"auto"= ><br></div><div dir=3D"auto">Thanks!<br><div data-smartmail=3D"gmail_signat= ure" dir=3D"auto">--<br><br>Thomas Altfather Good<br><a href=3D"http://thom= asgood=2Ecom/" target=3D"_blank" rel=3D"noreferrer">thomasgood=2Ecom</a><br= ><br><br>Washington-Baltimore News Guild, CWA Local 32035<br>National Press= Photographers Association<br><br>Level 6, Google Guide: <a href=3D"ht= tp://google=2Ethomasgood=2Ecom/" target=3D"_blank" rel=3D"noreferrer">googl= e=2Ethomasgood=2Ecom</a><br><br><br>=E2=80=9ELeben Sie jetzt die Fragen=2E= =E2=80=9C -- Rainer Maria Rilke<br><br><br> </div></= div></div> -- <br>slackware mailing list<br><a href=3D"mailto:slackware@mailman=2Elug= =2Eorg=2Euk" target=3D"_blank" rel=3D"noreferrer">slackware@mailman=2Elug= =2Eorg=2Euk</a><br><a href=3D"https://mailman=2Elug=2Eorg=2Euk/mailman/list= info/slackware" target=3D"_blank" rel=3D"noreferrer">https://mailman=2Elug= =2Eorg=2Euk/mailman/listinfo/slackware</a><br></div></blockquote></div><br>= </div></div>-- <br> slackware mailing list<br> <a href=3D"mailto:slackware@mailman=2Elug=2Eorg=2Euk" target=3D"_blank" re= l=3D"noreferrer">slackware@mailman=2Elug=2Eorg=2Euk</a><br> <a href=3D"https://mailman=2Elug=2Eorg=2Euk/mailman/listinfo/slackware" re= l=3D"noreferrer noreferrer" target=3D"_blank">https://mailman=2Elug=2Eorg= =2Euk/mailman/listinfo/slackware</a><br> </blockquote></div> </blockquote></div><div style=3D'white-space: pre-wrap'><div class=3D'k9ma= il-signature'>-- <br>Sent from my Android device with K-9 Mail=2E Please ex= cuse my brevity=2E</div></div></body></html> ------SAU6TI1B8RQZBFE5NICF5BUQQ53WHZ-- --===============3069673061520009896== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- slackware mailing list [email protected] https://mailman.lug.org.uk/mailman/listinfo/slackware --===============3069673061520009896==--