Connect this data source on your own, using the Hunters platform.
TL;DR
Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
|---|---|---|---|---|---|---|---|
Cerberus proftpd | ❌ | ❌ | ❌ | ❌ | cerberus_proftpd_logs | NDJSON | S3 |
Overview
Cerberus FTP is a secure and reliable file transfer server designed for businesses that need controlled, auditable, and encrypted file exchanges. It supports multiple protocols including FTP, FTPS, SFTP, and HTTPS, ensuring compatibility with most clients and automated workflows. Its key features include granular user and group permissions, event-driven automation for file handling, detailed logging and reporting, and integration with Active Directory for centralized authentication. Cerberus FTP is available for Windows and Linux, and emphasizes security with strong encryption, two-factor authentication, and compliance with standards like HIPAA and PCI. The product is suitable for IT teams managing sensitive data transfers, providing both a user-friendly interface and robust backend automation.
Supported data types
Cerberus proftpd logs
Table name: cerberus_proftpd_logs
Cerberus FTP / ProFTPD logs are structured JSON entries capturing detailed server activity.
Learn more here.
Send data to Hunters
Hunters supports the ingestion of Harness logs via an intermediary AWS S3 bucket.
To connect Harness logs:
Export your logs from Cerberus to an AWS S3 bucket by following this guide. Cerberus supports Syslog output based on UDP streaming.
Once the export is completed and the logs are collected to S3, follow the steps in this section.
Expected format
Logs are expected in JSON format.
{"host":"host1","ident":"proftpd","pid":"-","msgid":"-","extradata":"-","message":"2025-12-14 00:00:04,673 mod_sftp/1.1.1[12345]: using '/etc/proftpd/ssh/ssh_host_ecdsa_key' as 256-bit ECDSA hostkey (256 bits)"}
{"host":"host1","ident":"proftpd","pid":"-","msgid":"-","extradata":"-","message":"2025-12-14 00:00:04,674 mod_sftp/1.1.1[12345]: client (1.2.3.4:12345) connected to server (10.0.0.1:2222)"}