matano

Security data lake

A cloud-native security data lake built on AWS to normalize and analyze unstructured security logs at scale

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

GitHub

1k stars
22 watching
103 forks
Language: Rust
last commit: about 2 years ago
Linked from 6 awesome lists

alertingapache-icebergawsaws-securitybig-datacloudcloud-nativecloud-securitycybersecuritydetection-engineeringdfirlog-analyticslog-managementrustsecopssecuritysecurity-toolsserverlesssiemthreat-hunting

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
endgameinc/varnaAn AWS CloudTrail monitoring tool for alerting on suspicious activity51
a3sal0n/cyberthreathuntingA collection of tools and resources for threat hunters to identify and respond to cyber threats.861
sbasu7241/aws-threat-simulation-and-detectionThis repository documents the simulation and detection of various AWS attack scenarios using Stratus Red Team and SumoLogic for logging and analysis.284
azure/cloud-katanaAutomates security assessment and research in cloud-native environments using event-driven serverless computing250
matamorphosis/scrummageA platform for searching and analyzing publicly available online data to detect potential security threats515
opensoc/opensocA centralized platform for security monitoring and analysis utilizing open-source big data technologies to integrate log aggregation, packet capture indexing, advanced analytics, and threat intelligence.575
nathanmarz/cascalogA library for data processing and querying on large datasets without the need for Hadoop expertise1,375
aviate-labs/stable.moProvides data structures and utilities for working with stable, persistent data in multiple programming languages.1
trustoncloud/threatmodel-for-aws-s3An inventory of common attack scenarios on Amazon S3 storage and recommended countermeasures151
huntlabs/hunt-netA high-performance network library for the D programming language, providing an event-driven asynchronous implementation and codec support for TCP, UDP, and other protocols.20
mikependon/repodbAn ORM library designed to simplify .NET data access by providing a balance between micro-ORM and full-ORM functionality.1,725
duo-labs/cloudmapperAnalyzes AWS environments to identify security issues and network configurations.6,017
davidonzo/threat-intelDevelops and shares cyber threat intelligence information in various formats for SOC/CSIRT/CERT use.149
tenable/terrascanDetects security vulnerabilities and compliance issues in infrastructure code before provisioning cloud-native infrastructure.4,779
huntlabs/huntA refined core library providing building blocks for asynchronous and concurrent programming in the D programming language.95