linux-malware-detect

linux-malware-detect copied to clipboard

Adding statistics collection and sending to ELK

1

This Pull Request https://github.com/rfxn/linux-malware-detect/pull/113 was previously sent, I recently had the same need, I made some modifications to meet our need. Would it be possible to add in a next...

fernandodebrando

Feature : statistics collected with ELK

1

Hi, i work with maldet over multiple servers in a hosting company. The idea is centralize reports and be able to get some stats. This feature should be usefull for...

M4t3o

Enter from: adress

1

We're having problems getting the Maldet emails from the server delivered. This is because of the outgoing spamfilter (these are shared hosting servers) that does not accept email from root@servernaam....

tiskloteweer

Hello, I'm creating the following issue in order to report a false positive I recently found on my own server: **FILE HIT:** .cache/mozilla/firefox/gxknv56i.dev-edition-default/cache2/entries/552A48B4EE15F73D76E74D995DAB38422F5D2F09 which izs a gzip file created by...

PhLinuX-Lab

Suspicious file - no hit

1

Hi I don't know if this is the right place to submit possible threats but I've found this one that maldet misses: `

neilsf

Hello, We are facing false-positive result on file "index.php" of many websites. The file is obfuscated and therefore can be considered as a virus (it contains many hexacoded symbols) but...

SiteProTeam

with this fix the tlog script esport an entire line, and not a portion of it

tdmdema

Monitor Summary missing detection name and path

1

Hi, i use Maldet to monitor paths which seem to be working fine, about 50% of the time the hit list in the monitor summary email is missing the name...

K2rool

Hello. I'm running maldet in "--monitor users" mode. I can see in inotify_log file when a file is created or modified inside my home folder but when I delete it...

q2dg

Use yara binary if availiable

2

YARA rules are broken in clamscan, so it would be nice if there was a way to optionally use the native yara binary to scan files, instead of clamscan Ref.:...

tomsommer