A Real-time Event Correlation platform
-
Updated
Jan 30, 2017 - Java
A Real-time Event Correlation platform
A method for event correlation detection based on Spatial-Temporal-Textual point process
A Java concurrent API to asynchronously execute related tasks sequentially, and unrelated tasks concurrently.
Splunk lab detecting SSH brute-force attacks using failed login events, alerts, and dashboards.
Hands-on Active Directory authentication detection lab simulating SOC Tier-1 triage, correlation, and escalation workflows.
Cyber-Physical Event Bridge Prototype
Access Log Correlator - Python based access log correlation tool for detecting failed login bursts with schema validation and JSON output.
This engine will be the core of our monitoring mechanism. This engine will use the benefits of machine learning to provide a better solution with dynamic parameters.
Cross-domain event correlation via Prometheus Splunk PagerDuty OTel
Threat intelligence integration and event correlation platform
ThreatWeave - Real-time Threat Detection & SIEM Correlation Engine. Correlate security events from AWS CloudTrail, Office 365, Salesforce, Okta & more to detect sophisticated threats & attack patterns. Open-source, production-ready, MIT licensed. 🔐
Python CLI tool for validating, normalizing and correlating security events within configurable time windows.
C++ Sysmon event correlator for advanced threat detection and hunting
🔍 Detect SSH brute-force attacks with ease using Splunk, leveraging real-time alerts and visual dashboards from simulated Linux authentication logs.
Add a description, image, and links to the event-correlation topic page so that developers can more easily learn about it.
To associate your repository with the event-correlation topic, visit your repo's landing page and select "manage topics."