Re: EDR

--===============4712958638478679603==
Content-Type: multipart/alternative; boundary="000000000000dfde8005ec03e6b6"

--000000000000dfde8005ec03e6b6
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi, thanks much.

Do any of the EDRs install relatively easily with Slackware?



--

Thomas Altfather Good
thomasgood.com


Washington-Baltimore News Guild, CWA Local 32035
National Press Photographers Association

Level 6, Google Guide: google.thomasgood.com


=E2=80=9ELeben Sie jetzt die Fragen.=E2=80=9C -- Rainer Maria Rilke




On Thu, Oct 27, 2022, 08:57 Gil ANDRE <[email protected]> wrote:

> OSSEC works very well on Slackware, I have been using it for a long time.
>
> Wazuh is also very good, is a fork of OSSEC, but it requires a lot more
> work, since it drags a whole ELK stack.
>
> Both are not EDR, though, you should look at things like Dark Trace,
> Tehtris or Harfang Labs if you really want an EDR.
>
> On October 27, 2022 2:13:45 PM GMT+02:00, Thomas Altfather Good via
> slackware <[email protected]> wrote:
>>
>> Thanks Gabriel, this is very helpful.
>>
>> Cheers
>>
>> --
>>
>> Thomas Altfather Good
>> thomasgood.com
>>
>>
>> Washington-Baltimore News Guild, CWA Local 32035
>> National Press Photographers Association
>>
>> Level 6, Google Guide: google.thomasgood.com
>>
>>
>> =E2=80=9ELeben Sie jetzt die Fragen.=E2=80=9C -- Rainer Maria Rilke
>>
>>
>>
>>
>> On Thu, Oct 27, 2022, 08:02 Gabriel D=C3=ADaz L=C3=B3pez de la Llave via=
 slackware <
>> [email protected]> wrote:
>>
>>> hello
>>>
>>> Wazuh is open source and can be integrated with many environments. It
>>> does not support Slackware natively, but I=E2=80=99m sure it can be ada=
pted.
>>>
>>> https://github.com/wazuh/wazuh
>>>
>>> There is a very active slack community where you can interact with othe=
r
>>> people using it.
>>>
>>> https://wazuh.com/community/join-us-on-slack/
>>>
>>> gabriel
>>>
>>>
>>>
>>> El 27 oct 2022, a las 13:54, Thomas Altfather Good via slackware <
>>> [email protected]> escribi=C3=B3:
>>>
>>>
>>> Hi All,
>>>
>>> Has anyone gotten SentinelOne to work with Slackware?
>>>
>>> Or - can someone recommend an EDR?
>>>
>>> Thanks!
>>> --
>>>
>>> Thomas Altfather Good
>>> thomasgood.com
>>>
>>>
>>> Washington-Baltimore News Guild, CWA Local 32035
>>> National Press Photographers Association
>>>
>>> Level 6, Google Guide: google.thomasgood.com
>>>
>>>
>>> =E2=80=9ELeben Sie jetzt die Fragen.=E2=80=9C -- Rainer Maria Rilke
>>>
>>>
>>>
>>> --
>>> slackware mailing list
>>> [email protected]
>>> https://mailman.lug.org.uk/mailman/listinfo/slackware
>>>
>>>
>>> --
>>> slackware mailing list
>>> [email protected]
>>> https://mailman.lug.org.uk/mailman/listinfo/slackware
>>>
>> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
>

--000000000000dfde8005ec03e6b6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Hi, thanks much.<div dir=3D"auto"><br></div><div dir=3D"a=
uto">Do any of the EDRs install relatively easily with Slackware?<br><div d=
ir=3D"auto"><br></div><div dir=3D"auto"><br><br><div data-smartmail=3D"gmai=
l_signature" dir=3D"auto">--<br><br>Thomas Altfather Good<br><a href=3D"htt=
p://thomasgood.com">thomasgood.com</a><br><br><br>Washington-Baltimore News=
 Guild, CWA Local 32035<br>National Press Photographers Association<br><br>=
Level 6, Google Guide:=C2=A0<a href=3D"http://google.thomasgood.com">google=
.thomasgood.com</a><br><br><br>=E2=80=9ELeben Sie jetzt die Fragen.=E2=80=
=9C=C2=A0-- Rainer Maria Rilke<br><br><br>=C2=A0=C2=A0=C2=A0 </div></div></=
div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_at=
tr">On Thu, Oct 27, 2022, 08:57 Gil ANDRE &lt;<a href=3D"mailto:andre.g@wan=
adoo.fr">[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gm=
ail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-le=
ft:1ex"><div>OSSEC works very well on Slackware, I have been using it for a=
 long time.<br><br>Wazuh is also very good, is a fork of OSSEC, but it requ=
ires a lot more work, since it drags a whole ELK stack.<br><br>Both are not=
 EDR, though, you should look at things like Dark Trace, Tehtris or Harfang=
 Labs if you really want an EDR.<br><br><div class=3D"gmail_quote">On Octob=
er 27, 2022 2:13:45 PM GMT+02:00, Thomas Altfather Good via slackware &lt;<=
a href=3D"mailto:[email protected]" target=3D"_blank" rel=3D"nor=
eferrer">[email protected]</a>&gt; wrote:<blockquote class=3D"gm=
ail_quote" style=3D"margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,=
204,204);padding-left:1ex">
<div dir=3D"auto">Thanks Gabriel, this is very helpful.<div dir=3D"auto"><b=
r></div><div dir=3D"auto">Cheers<br><br><div data-smartmail=3D"gmail_signat=
ure" dir=3D"auto">--<br><br>Thomas Altfather Good<br><a href=3D"http://thom=
asgood.com" target=3D"_blank" rel=3D"noreferrer">thomasgood.com</a><br><br>=
<br>Washington-Baltimore News Guild, CWA Local 32035<br>National Press Phot=
ographers Association<br><br>Level 6, Google Guide:=C2=A0<a href=3D"http://=
google.thomasgood.com" target=3D"_blank" rel=3D"noreferrer">google.thomasgo=
od.com</a><br><br><br>=E2=80=9ELeben Sie jetzt die Fragen.=E2=80=9C=C2=A0--=
 Rainer Maria Rilke<br><br><br>=C2=A0=C2=A0=C2=A0 </div></div></div><br><di=
v class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Oct 2=
7, 2022, 08:02 Gabriel D=C3=ADaz L=C3=B3pez de la Llave via slackware &lt;<=
a href=3D"mailto:[email protected]" target=3D"_blank" rel=3D"nor=
eferrer">[email protected]</a>&gt; wrote:<br></div><blockquote c=
lass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;=
padding-left:1ex"><div style=3D"line-break:after-white-space">hello<div><br=
></div><div>Wazuh is open source and can be integrated with many environmen=
ts. It does not support Slackware natively, but I=E2=80=99m sure it can be =
adapted.=C2=A0</div><div><br></div><div><a href=3D"https://github.com/wazuh=
/wazuh" rel=3D"noreferrer noreferrer" target=3D"_blank">https://github.com/=
wazuh/wazuh</a></div><div><br></div><div>There is a very active slack commu=
nity where you can interact with other people using it.=C2=A0</div><div><br=
></div><div><a href=3D"https://wazuh.com/community/join-us-on-slack/" rel=
=3D"noreferrer noreferrer" target=3D"_blank">https://wazuh.com/community/jo=
in-us-on-slack/</a><br></div><div></div><div><br></div><div>gabriel</div><d=
iv><br></div><div><br><div><br><blockquote type=3D"cite"><div>El 27 oct 202=
2, a las 13:54, Thomas Altfather Good via slackware &lt;<a href=3D"mailto:s=
[email protected]" rel=3D"noreferrer noreferrer" target=3D"_blank=
">[email protected]</a>&gt; escribi=C3=B3:</div><br><div><div di=
r=3D"auto"><br>Hi All,=C2=A0<div dir=3D"auto"><br></div><div dir=3D"auto">H=
as anyone gotten SentinelOne to work with Slackware?</div><div dir=3D"auto"=
><br></div><div dir=3D"auto">Or - can someone recommend an EDR?</div><div d=
ir=3D"auto"><br></div><div dir=3D"auto">Thanks!<br><div data-smartmail=3D"g=
mail_signature" dir=3D"auto">--<br><br>Thomas Altfather Good<br><a href=3D"=
http://thomasgood.com/" rel=3D"noreferrer noreferrer" target=3D"_blank">tho=
masgood.com</a><br><br><br>Washington-Baltimore News Guild, CWA Local 32035=
<br>National Press Photographers Association<br><br>Level 6, Google Guide:=
=C2=A0<a href=3D"http://google.thomasgood.com/" rel=3D"noreferrer noreferre=
r" target=3D"_blank">google.thomasgood.com</a><br><br><br>=E2=80=9ELeben Si=
e jetzt die Fragen.=E2=80=9C=C2=A0-- Rainer Maria Rilke<br><br><br>=C2=A0=
=C2=A0=C2=A0 </div></div></div>
-- <br>slackware mailing list<br><a href=3D"mailto:[email protected]=
g.uk" rel=3D"noreferrer noreferrer" target=3D"_blank">[email protected]=
.org.uk</a><br><a href=3D"https://mailman.lug.org.uk/mailman/listinfo/slack=
ware" rel=3D"noreferrer noreferrer" target=3D"_blank">https://mailman.lug.o=
rg.uk/mailman/listinfo/slackware</a><br></div></blockquote></div><br></div>=
</div>-- <br>
slackware mailing list<br>
<a href=3D"mailto:[email protected]" rel=3D"noreferrer noreferre=
r" target=3D"_blank">[email protected]</a><br>
<a href=3D"https://mailman.lug.org.uk/mailman/listinfo/slackware" rel=3D"no=
referrer noreferrer noreferrer" target=3D"_blank">https://mailman.lug.org.u=
k/mailman/listinfo/slackware</a><br>
</blockquote></div>
</blockquote></div><div style=3D"white-space:pre-wrap"><div>-- <br>Sent fro=
m my Android device with K-9 Mail. Please excuse my brevity.</div></div></d=
iv></blockquote></div>

--000000000000dfde8005ec03e6b6--


--===============4712958638478679603==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
slackware mailing list
[email protected]
https://mailman.lug.org.uk/mailman/listinfo/slackware

--===============4712958638478679603==--