OpenSearch Security Analytics

The OpenSearch Security Analytics aims to enable you to run security operations by automating threat detection and threat analysis on your data. Security analytics plugin will include a threat detection engine that will be pre-loaded with a set of detection rules, that you can customize and extend to alert on standard or custom attack patterns.

Highlights

This open-source framework for analyzing the security events will address the cost and complexity associated with running the security operations on your business and infrastructure data.
It will enable you to monitor your data, generate findings and send alert notifications automatically to your stakeholders.
The security analytics dashboards will let you manage your threats, correlate events and take remediation actions.

Documentation

Please see our documentation [ToDo].

Contributing

See CONTRIBUTING for more information.

Code of Conduct

This project has adopted the Amazon Open Source Code of Conduct. For more information see the Code of Conduct FAQ, or contact opensource-codeofconduct@amazon.com with any additional questions or comments.

Security

If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our vulnerability reporting page. Please do not create a public GitHub issue.

License

This project is licensed under the Apache-2.0 License.

peterzhuamazon/security-analytics