From f1eb637e6d90da9068fad683fd971fe83875ae1c Mon Sep 17 00:00:00 2001 From: Adel K Date: Mon, 6 Mar 2023 15:38:05 +0100 Subject: [PATCH] Add Matano --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 02dc18c..e6f62e1 100644 --- a/README.md +++ b/README.md @@ -61,10 +61,11 @@ - [VAST](https://github.com/tenzir/vast) - A network telemetry engine for data-driven security investigations. - [zeek2es](https://github.com/corelight/zeek2es) - An open source tool to convert Zeek logs to Elastic/OpenSearch. You can also output pure JSON from Zeek's TSV logs! -### Alerting Engine +### Detection and Alerting Platforms - [ElastAlert](https://github.com/Yelp/elastalert) - A framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch - [StreamAlert](https://github.com/airbnb/streamalert) - A serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define +- [Matano](https://github.com/matanolabs/matano): An open source security lake platform (SIEM alternative) for threat hunting, detection and response on AWS. Matano lets you write advanced detections as code (using python) to correlate and alert on threats in realtime. ### Endpoint Monitoring