Giter VIP home page Giter VIP logo

openxdr's Introduction

OpenXDR

OpenXDR is a real-time opensource extended detection and response system which can seamlessly integrate with any EDR, NDR, SIEM, and IDS.

One of the most important aspects of modern enterprise security is response time. The earlier you discover a threat, the sooner you can respond and avoid the potential damage to your network and endpoints. But, because of detection delays, alert fatigue, the volume of your network, and other factors, taking real-time decisions is a difficult task for the majority of XDR systems. OpenXDR is an open-source extended detection and response system that addresses above mention issues and uses state of the art streaming processing technologies and real-time active and passive detection engines to detect and respond to threats (endpoints and network) in real time. Furthermore, OpenXDR uses cutting-edge batch processing to analyze historical data and identify future threats to the system. Also, OpenXDR can seamlessly integrate with any EDR, NDR, SIEM, or IDS because it uses a bespoke probe designed for specific vendors to convert any available source to the system.

Console

Dashboard and console for resource (log collection, processing units, storage clusters and index) management and monitoring.

console

openxdr's People

Contributors

charithccmc avatar piumalkulasekara avatar sameeravithana avatar thatudeshuk avatar

Stargazers

 avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

openxdr's Issues

Design mock dashboard for OpenADS

In the long run, we need to have a single dashboard to monitor incoming packets, filtering, visualization and analysis, This task is to come up with UI features

What is the data-structure to be considered for identified data points?

As explained in the architecture, RDD can used to pass data-points between components, RDD is kind of immutable data-sets that are generated from any type of data objects. But do we have to identify a generic data structure to represent objects, or do we maintain desperate objects per data-source. That should be resilient for future plug-in data sources as well. come up with such

Repo should follow GitFlow workflow

This repos should follow Gitflow workflow and follow are the items you have to check.

  • There is a master branch and a develop branch.
  • master branch is locked for direct commits and,
    • Require pull request reviews before merging is active
    • Require status checks to pass before merging is active
      • Require branches to be up to date before merging
      • Appropriate Status checks are required
    • Enforce all configured restrictions for administrators is active
    • Restrict only maintainers group can push to the master branch
  • develop branch is locked for direct commits and,
    • Require pull request reviews before merging
      • Dismiss stale pull request approvals when new commits are pushed is active
    • Require pull request reviews before merging is active
    • Require status checks to pass before merging is active
      • Require branches to be up to date before merging
      • Appropriate Status checks are required
    • Enforce all configured restrictions for administrators is active
    • Restrict only maintainers group can push to the master branch

Adding log collector

This component contains the log colletor for the following Linux log collectors.

  • Application Logs.
  • Event Logs.
  • Service Logs.
  • System Logs.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.