OpenEDR Integration

[DrStupendous]

Hello Security Onion pro's
I was wondering if there is a way to integrate openEDR into security onion for Endpoint response capabilities?

Or if there is any opensource EDR that can be integrated into Security Onion?

[InfosecGoon]

For endpoint response, would Velociraptor be sufficient? This might interest you:

https://github.com/weslambert/securityonion-velociraptor

[DrStupendous]

Thank you,

I was looking into velociraptor aswell.. I will throw that in a test deployment