Tools: network-security-monitoring (10)

The ATT&CK Navigator is designed to provide basic navigation and annotation of ATT&CK matrices, something that people are already doing today in…

ElastAlert 2 is a simple framework for alerting on anomalies, spikes, or other patterns of interest from data in Elasticsearch.

With Elastic Agent you can collect all forms of data from anywhere with a single unified agent per host.

An index template is a way to tell Elasticsearch how to configure an index when it is created.

InfluxDB is an open source time series platform.

Kibana

By default, Logstash uses in-memory bounded queues between pipeline stages (inputs → pipeline workers) to buffer events.

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Built on Python, Salt is an event-driven automation tool and framework to deploy, configure, and manage complex IT systems.

Strelka is a real-time file scanning system used for threat hunting, threat detection, and incident response.