threatseer
threatseer copied to clipboard
add webui for rules, alert, and events
desired features:
- triage and respond to alerts
- sort by time, severity within window, severity within window grouped by agent
- configure rules and see stats
- view and query events (probably from ES)
Working on Postgres+Metabase integration and K8s deployment in k8s branch