matano
matano copied to clipboard
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
I am running Ubuntu 20.04 on Windows via WSL 1. I have installed node.js v12.22.12 via the Node Version Manager per https://www.digitalocean.com/community/tutorials/how-to-install-node-js-on-ubuntu-20-04. I have installed the Matano CLI and created...
I am running Ubuntu 20.04 on Windows via WSL 1. I have installed node.js v12.22.12 via the Node Version Manager per https://www.digitalocean.com/community/tutorials/how-to-install-node-js-on-ubuntu-20-04. After installing the Matano CLI per https://www.matano.dev/docs/installation, I...
The documentation at https://www.matano.dev/docs/getting-started#create-a-matano-directory directs users to run `matano generate:matano-dir`, but that command requires an argument specifying the target directory, e.g., `matano generate:matano-dir my-matano-config`.
I am running Ubuntu 20.04 on Windows via WSL 1. I have installed node.js v12.22.12 via the NodeSource PPA per https://www.digitalocean.com/community/tutorials/how-to-install-node-js-on-ubuntu-20-04. Running `make install` per https://www.matano.dev/docs/installation, I get the following...
The documentation at https://www.matano.dev/docs/installation tells users to run these commands to install the Matano CLI: ```sh git clone https://github.com/matanolabs/matano.git cd matano && make install ``` However, the README at https://github.com/matanolabs/matano#from-source...
Hello, I tried to give matano a go on a fresh AWS account. But when I tried to deploy it, I get the following error message, saying AWS Lambda functions...
Tracking for managed log source support ### Log sources - [x] AWS CloudTrail - [ ] #51 - [x] #94 - [x] #55 - [x] #48 - [x] #89 -...
thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: HTTP status client error (400 Bad Request) for url (https://manage.office.com/api/v1.0/{}/activity/feed/subscriptions/content?contentType=Audit.General&startTime=2023-12-18T14%3A35%3A00&endTime=2023-12-18T14%3A36%3A00)', log_puller/src/pullers/o365.rs:200:5
There is a bug in the the cloudflare http event schema. The schema defines the `cloudflare.http_event.bot.tag` as a string here, but the actual value is an array of strings, see:...
We should include out-of-the-box detection rules in Matano so users do not have to start from scratch for detection engineering. Similar to other vendors like Elastic, Chronicle, etc. we should...