Prelude (2 of 2)

• Sensor(s)

  • Suspicious activity generation
  • Alerts generation

• Manager(s)

  • Components management / config
  • Alerts storage and aggregation
  • Notification and response

• Frontend (Prelude-PHP-Frontend)

  • Alerts visualization
  • Manual forensic analysis

• Log Monitoring Lackey (LML) performs HIDS functions using syslog and other logfiles