Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
Die Hauptfunktionen von matanolabs/matano sind: Security Data Analytics, Security Logging and SIEM, Detection and Alerting Platforms, Forensics and Incident Response, Incident Response Platforms, Security Assessment Tools.
Open-Source-Alternativen zu matanolabs/matano sind unter anderem: velocidex/velociraptor — Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and… netflix/dispatch — Dispatch is an incident response orchestration platform that automates the coordination of detection, participant… fireeye/silketw. brexhq/substation — Substation is a toolkit for routing, normalizing, and enriching security event and audit logs. dfirkuiper/kuiper — Digital Forensics Investigation Platform. anssi-fr/dfir-o365rc.
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Dispatch is an incident response orchestration platform that automates the coordination of detection, participant assembly, and task tracking across existing communication and project management tools. It provides a web-configurable state machine to manage incident lifecycle transitions, with template-driven incident models that define types, priorities, and severity levels. The platform enforces role-based access control to map user roles to specific actions and data access, while maintaining a database-backed audit trail of all incident events and system changes for compliance and post-incid