Links to Preset YARA Rules for Detecting WordPress:
- Preset Rules on GitHub
- [YARA Rules Guide: What They Are & How to Write…
Pros of using Alloy (to Replace Promtail)
-
Future-proofing: Since Promtail is deprecated, Alloy ensures we're not stuck with unsupported software.
-
Unified collector: Alloy…
Meeting 3 Notes
- Grafana Loki + Fluent Bit are definitive as of now
- Set up a Docker container to play around with these logging aggregation tools (we will learn how to do this soon) ->…
Meeting 3 Notes:
- Look into preset online rule sets for YARA, specifically catered to Wordpress
- We can implement YARA with these rules once the Docker is done
ClamAV
- Based on our objectives, we'd use ClamAV for broad, automated “known malware” screening at upload time
- This tool answers the question: “Has this file been seen in the wild…
If we use Grafana Loki and Promtail as our logging aggregation tools, there is the benefit of both YARA and ClamAV scanners (which it was requested that I look into) having the ability to be…
If we use Grafana Loki and Promtail as our logging aggregation tools, there is the benefit of both YARA and ClamAV scanners (which it was requested that I look into) having the ability to be…
There is a demo coming up for how to get started with logging using Grafana Loki on October 22nd ([Info Here](https://grafana.com/go/webinar/getting-started-with-logging-and-grafana-loki/?pg=oss-lo…
In terms of ease of setup and teaching, alerting and visualization, easy integration with scripts, and overall fit for the objectives of this project, Grafana Loki, coupled with Fluent Bit, are…