Search Results for "kernel-module-ntfs"

...Osquery exposes an operating system as a high-performance relational database. This allows you to write SQL queries to explore operating system data. With osquery, SQL tables represent abstract concepts such as running processes, loaded kernel modules, open network connections, browser plugins, hardware events or file hashes.Osquery queries your devices like a database. Osquery uses basic SQL commands to leverage a relational data-model to describe a device. Frequently, attackers will leave a malicious process running but delete the original binary on disk. This query returns any process whose original binary has been deleted, which could be an indicator of a suspicious process.

ttyrpld is a multi-OS kernel-level TTY keylogger and screenlogger with (a)synchronous replay support. It runs on Linux, Solaris, FreeBSD, NetBSD and OpenBSD.

...Autologging provides two decorators and a custom log level: "autologging.logged" decorates a class to create a __log member. By default, the logger is named for the class's containing module and name (e.g. "my.module.ClassName"). "autologging.traced" decorates a class to provide automatic CALL/RETURN tracing for all class, static, and instance methods, as well as the special __init__ method (by default) "autologging.TRACE" is a custom log level (lower than logging.DEBUG) that is registered with the Python logging module when autologging is imported

...It can collect logs from files in various formats, receive logs from the network remotely over UDP, TCP or TLS/SSL . It supports platform specific sources such as the Windows Eventlog, Linux kernel logs, Android logs, local syslog etc. Writing and reading logs to/from databases is also supported. The collected logs can be stored into files, databases or forwarded to a remote log server using various protocols. The old BSD Syslog and the newer IETF syslog standard is fully supported by NXLog in addition to Snare, XML, JSON, GELF, KVP, CSV and custom formats. ...

[ set status to abandon - volunteers welcome ] The postfix-logwatch / amavis-logwatch log analyzers produce summaries, reports and statistics regarding the operation of postfix and amavis. Use standalone, or as a filter module for the open source logwatch utility.

nf_quota is an ip-based traffic accounting project. IPs can be added to users. It provides a kernel module that hooks onto netfilter and counts every packet passing a specified interface. If the quota for a ip/user is exceeded, the packet is dropped.

...You have to customize syslog-ng to include severity as the first character in each logged line, and to pipe the logged messages through the logcolourer program. You can use the program to colour any file according to digits in the first character of each line. logcolourer can also process lines from the linux kernel, though these normally get routed via syslog-ng anyway.

cross platform logging module for Python with a C interface

...Have full control of the complete history of changes done to your server/software/devices from one common interface, accessible from any web browser. Includes an asset management module.

py-rrdtool is a Python module provides an interface to RRDTool, the well known graphing/logging tool.

Moodss is a modular monitoring application, composed of a GUI and a daemon, which supports any device or process for which a module can be developed. Complete dashboards with graphical viewers, thresholds, SQL database archiving, ... can be managed.

This project involves adding code to the Linux kernel to implement crash dumps for performing post-failure analysis of a kernel crash.

A wrapper for Python's standard logging module to provide a file-like interface. Allows legacy code that wishes to log to a file (including stdout and stderr) to use the logger facility.

Module to allow for reading lines from a continuously-growing file (such as a system log). Handles log files that get rotated/trucated out from under us. Inspired by the Perl File::Tail module.

Compiere-NMA is a compiere module for network monitoring, pbx cdr, accounting and billing. Target is to provide the needed infrastructure for providers and companies needed to monitor and bill IP networks based on Compiere ERP + CRM.

Uberviewer is a java/swt log processor for Uberlogger (a kernel-based observatory). It allows real-time analysis of a remote OS, including process and I/O monitoring. This tool is intended to be helpful for security researchers and malware analysts.

IP Traffic Volume: Logs (counts) in- & outgoing bytes through network device(s) using kernel iptables. Highly configurable as to which bytes are logged, e.g. to/from specific ports or ip-addresses. Data displayed in html via cgi or plain ascii to console

IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid. Use the PCAP library to implement connection to bpf kernel pseudo-device.

This perl script, Peril, uses the Perl module File::Tail to tail the syslog file (or any other file for that matter) and inserts the lines into a MySQL database using DBI. It includes a quick phpMyEdit generated page to view the logs through a browser an

Syscall logger is a Linux kernel patch which enables logging of the selected syscalls using syslog.

USRBAC is a kernel patch and userspace daemon that allows role based access control to be mitegated in userspace. The goal is to allow a secure way to impliment RBAC compliant security systems using a daemon in userspace

Status Module is a daemon which forwards vital system information (memory usage, active processes, etc.) into the kernel logs by using a kernel module. This is very useful for logging or security purposes.

log4py is a logging module for python, similar to log4j

pam_eps enables you to authentify users against a machine with a ssh daemon running. If the user exists in the remote server and the password is correct a new user with the expecified password and username will be created in the local machine.

A linux kernel module and supporting user space environment which allow interception and modifying system calls that match user defined criteria. Think of it as strace on steroids.