Prelude Technologies

INL acquires PreludeIDS

Mon, 30 Mar 2009 18:28:00 +0200

On march 27th 2009, INL has has acquired Prelude-IDS, a very innovative IT security company. The Prelude software agglomerates all security related information of an organization, and correlates that information to generate sensible alerts for administrators. The Prelude product integrates to EdenWall in a very complementary way, and will allow INL to enlarge its security product offer on the market. INL and Prelude-IDS publish a common Press Release to describe this acquisition.

Release of the new Prelude documentation

Thu, 22 Jan 2009 13:20:00 +0100

Prelude celebrates its 10th anniversary and gives itself a brand new documentation!
As promised the Prelude team upgrades its documentation. The Prelude Wiki is entirely reviewed and upgraded with the last new features of Prelude.
Totally new articles are added to the Prelude documentation, to provide new users as well as advanced ones with relevant and complete information, including a brand new user manual of the Prewikka GUI
You will find the new documentation at the address below: https://dev.prelude-technologies.com/wiki/prelude/
However, the Prelude wiki is above all your wiki: Contributions are greatly appreciated and we are thankful for any documentation additions and corrections made for the project. So, it's your turn!
To learn more about how to contribute to the Prelude wiki don't hesitate to refer to the Contribute Guidelines article.
See you on the Prelude wiki!

Libprelude now compile and run under Win32 native!

Fri, 19 Sep 2008 19:02:00 +0200

The new Libprelude version 0.9.21 is compatible with the Windows operating system. It allows connecting sensors from Windows systems, or to create your own Prelude sensors for this platform. By installing libprelude on a Windows system, your Windows sensors will be able to send their events to a remote Prelude-Manager. Reported events (Windows / Unix) will be correlated together, thanks to Prelude-Correlator, and visualized in the Prewikka interface.

Prelude Conference at the 2008 LSM

Wed, 02 Jul 2008 14:45:00 +0200

"The LSM (Libre Software Meeting) are an opportunity for all sort of public to come together around the free software. Over 5 days, conferences and workshops welcome everyone. This event is organized each year and for the 9th edition is hosted in the town of Mont de Marsan, from 1 to 5 July 2008." From the LSM Website On July 2008, for the 2008 LSM, Yoann Vandoorselaere, Prelude creator and PreludeIDS Technologies CTO, will give a talk entitled "Prelude, State of the Art". In this talk, in english, we will introduce the Prelude system and describe the current state of the art: correlation, new programming interface suitable for scripting languages, and individuals improvements made to each Prelude modules. See Also:

The 2008 LSM Website
The "Prelude, State of the art" talk (pdf)
All Prelude conferences

Prelude-Correlator Beta1 release

Fri, 27 Jun 2008 13:28:00 +0200

PreludeIDS Technologies is proud to announce the first Prelude-Correlator beta release. Prelude-Correlator serves to correlate, in real time, the multiple events received by Prelude. Several isolated alerts, generated from different sensors, can thus trigger a single correlation alert should the events be related. This correlation alert then appears within the Prewikka interface and indicates the potential target information via the set of correlation rules. Signature creation with Prelude-Correlator is based on the powerful programming language Lua.

See the Correlation Engine page
Download Prelude-Correlator

The Mail Reporting plugin now open source!

Fri, 27 Jun 2008 13:34:00 +0200

The commercial extension Mail Reporting plugin is now open source! This functionality is now integrated to Prelude-Manager starting from version 0.9.13. The Mail Reporting Plugin automatically sends emails containing a textual description of events reported to Prelude to a configured list of recipients. The body of the generated email can be the full event, or specific part of it by using a customized template. Additionally, this plugin is optionally capable of querying the Prelude database in order to include information concerning older events tied to an incoming event. Using the Mail Reporting Plugin in combination with Prelude-Manager filtering functionality, it is possible to generate email only on events matching specific criteria or threshold. Download Prelude-Manager 0.9.13.

Launch of the new Prelude Website

Thu, 26 Jun 2008 13:53:00 +0200

The new Prelude Website is online. The Prelude team has updated its communication and knowledge sharing tool and will now feature a revised format, new articles and an improved organization of headings to make the browsing experience smoother and more effective. Yet the fundamental change lies in merging the Prelude-ids.com and Prelude-ids.org sites, in the same objective of streamlining and facilitating the browsing experience. The content of the Prelude Project site will be completely integrated and directly accessible via a heading entitled "Development". The merger will come about naturally; former site users will not feel lost and new visitors will find their visit to the site an enjoyable one. The launch of this site will also provide the occasion to refresh and enhance some of the most practical content, including the site's documentation features. Number of original headings and functionality should also make their way onto the site. We hope you'll find this updated site every bit as attractive as the Prelude team has tried to make it. Should you have any comments or wish to correct any site content, please feel free to contact us.

INL-PreludeIDS Breakfast conference at �Arts-et-M�tiers� museum, Paris, France

Tue, 18 Mar 2008 11:48:00 +0100

On monday march 18 2008, INL and PreludeIDS organized a Breakfast Conference on the subject: Make your security solutions cooperate: Increase your efficiency. The opportunity for both sides to present new opportunities offered by the cooperation between NuFW (Firewall by INL) and Prelude.

OpenSource Security - PreludeIDS Partnership Technologies

Tue, 11 Mar 2008 11:22:00 +0100

OpenSource Security becomes PreludeIDS Certified Partner for Germany, United Kingdom, Austria and the Netherlands. PreludeIDS is proud to count the OpenSource Security company among its Certified Partners. OpenSource Security is owned by Ralf Spenneberg, an open source security expert. In that capacity, he is the author of several books including � Intrusion Detection und Prevention mit Snort 2 & Co. � (in German) in which he devotes a chapter to the Prelude system. Read the OpenSource Security company profile on PreludeIDS website

New prelude sensor: Auditd

Wed, 06 Feb 2008 12:29:00 +0100

Steve Grubb from Red Hat wrote the prelude plugin for Auditd, the SELinux daemon which logs policies violations. The plugin can currently detect and message: Apps that terminate abnormally (gcc stack overflow/glibc FORTIFY_SOURCE/plain old segfault), SE Linux AVCs, Logins, MAX failed login attempts reached, MAX concurrent sessions reached. This is all done in real-time and not based on a cron job. The audit daemon is capable of being run directly from init if you wanted to do it that way. The package, installation instructions are available at:
http://people.redhat.com/sgrubb/audit/. If you run fedora core 8, you can try it easily by running:

yum --enablerepo=updates-testing install audispd-plugins

To do testing on Fedora rawhide (which will become Fedora 9), you will need to put selinux in permissive mode, "setenforce 0". More information available in Steve�s auditd+prelude HOWTO.