diff --git a/README.md b/README.md index 02dc18c..e6f62e1 100644 --- a/README.md +++ b/README.md @@ -61,10 +61,11 @@ - [VAST](https://github.com/tenzir/vast) - A network telemetry engine for data-driven security investigations. - [zeek2es](https://github.com/corelight/zeek2es) - An open source tool to convert Zeek logs to Elastic/OpenSearch. You can also output pure JSON from Zeek's TSV logs! -### Alerting Engine +### Detection and Alerting Platforms - [ElastAlert](https://github.com/Yelp/elastalert) - A framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch - [StreamAlert](https://github.com/airbnb/streamalert) - A serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define +- [Matano](https://github.com/matanolabs/matano): An open source security lake platform (SIEM alternative) for threat hunting, detection and response on AWS. Matano lets you write advanced detections as code (using python) to correlate and alert on threats in realtime. ### Endpoint Monitoring