https://cp.xscode.com/Tormorrow-SOC/OpenUB
To Build a lightweight, SIEM Agnostic, UEBA Framework focused on providing:
- Model Management
- Community-driven Model Library
- Model Versioning
- Dashboard
- Rule Storage/Management
- Case Management
- Peer-oriented/community intel
- Lightweight, SIEM-agnostic infrastructure
- Flexible/open dataset support
- Model Client (optional)
- Model Server (Remote or Local)
- Transport Client
- User Inferface
The interface is meant to observe system events, and anomalies, but not to replace a SIEM.
- Dashboard (index)
- Anomalies
- Cases
- Data
- Modeling
Go to INSTALL.md
Discord channel: https://discord.gg/7t4qJk
Telegram: https://t.me/tomorrowsoc