Prelude SIEM

Prelude SIEM is a Security Information and Event Management system, for all available security application, opensource or proprietary, to report to a centralized system. In order to achieve this task, Prelude relies on the IDMEF (Intrusion Detection Message Exchange Format) IETF standard (RFC 4765), that enables different kinds of sensors to generate events using an unified language.

Prelude SIEM benefits from its ability to find traces of malicious activity from different sensors (Snort, Suricata, OSSEC, Wazuh, honeyd, Samhain, over 30 types of systems logs, and others) in order to better verify an attack and in the end to perform automatic correlation between the various events.

Prelude SIEM is commited to providing a SIEM that offers the ability to unify currently available tools.

Tags

cybersecurity detection firewall forensics hacking hids ids infosec intrusion linux logger logmanagement monitoring networking nids security siem sysadmin tools utilities