

Prelude
Prelude is a Universal Security Information & Event Management (SIEM) system. It collects, normalizes, sorts, aggregates, correlates and reports all security-related events independently of the product brand or license giving rise to such events.
Cost / License
- Free
- Open Source
Platforms
- Linux
Features
Tags
- Security Utilities
- syslog
- siem
- security-analysis
- security-suite
- intrusion-detection-system
- Network Security
- security-analytics
- intrusion-detection
- logfile
Prelude News & Activities
Recent activities
Prelude information
What is Prelude?
Prelude is a Universal "Security Information & Event Management" (SIEM) system. Prelude collects, normalizes, sorts, aggregates, correlates and reports all security-related events independently of the product brand or license giving rise to such events; Prelude is "agentless".
As well as being capable of recovering any type of log (system logs, syslog, flat files, etc.), Prelude benefits from a native support with a number of systems dedicated to enriching information even further (snort, samhain, ossec, auditd, etc.).
Actual third party agents: auditd, ufwi-filterd, Snort, Suricata, OSSEC.
Security events are normalized thanks to a single format, called the "Intrusion Detection Message Exchange Format" (IDMEF - RFC4765), which is an international standard created upon the initiative of IETF along with the participation of Prelude teams to enable interacting with the various security tools currently available on the market.







