matano icon indicating copy to clipboard operation
matano copied to clipboard

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Results 59 matano issues
Sort by recently updated
recently updated
newest added

I am running Ubuntu 20.04 on Windows via WSL 1. I have installed node.js v12.22.12 via the Node Version Manager per https://www.digitalocean.com/community/tutorials/how-to-install-node-js-on-ubuntu-20-04. I have installed the Matano CLI and created...

I am running Ubuntu 20.04 on Windows via WSL 1. I have installed node.js v12.22.12 via the Node Version Manager per https://www.digitalocean.com/community/tutorials/how-to-install-node-js-on-ubuntu-20-04. After installing the Matano CLI per https://www.matano.dev/docs/installation, I...

The documentation at https://www.matano.dev/docs/getting-started#create-a-matano-directory directs users to run `matano generate:matano-dir`, but that command requires an argument specifying the target directory, e.g., `matano generate:matano-dir my-matano-config`.

I am running Ubuntu 20.04 on Windows via WSL 1. I have installed node.js v12.22.12 via the NodeSource PPA per https://www.digitalocean.com/community/tutorials/how-to-install-node-js-on-ubuntu-20-04. Running `make install` per https://www.matano.dev/docs/installation, I get the following...

The documentation at https://www.matano.dev/docs/installation tells users to run these commands to install the Matano CLI: ```sh git clone https://github.com/matanolabs/matano.git cd matano && make install ``` However, the README at https://github.com/matanolabs/matano#from-source...

Hello, I tried to give matano a go on a fresh AWS account. But when I tried to deploy it, I get the following error message, saying AWS Lambda functions...

Tracking for managed log source support ### Log sources - [x] AWS CloudTrail - [ ] #51 - [x] #94 - [x] #55 - [x] #48 - [x] #89 -...

enhancement
planned

thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: HTTP status client error (400 Bad Request) for url (https://manage.office.com/api/v1.0/{}/activity/feed/subscriptions/content?contentType=Audit.General&startTime=2023-12-18T14%3A35%3A00&endTime=2023-12-18T14%3A36%3A00)', log_puller/src/pullers/o365.rs:200:5

There is a bug in the the cloudflare http event schema. The schema defines the `cloudflare.http_event.bot.tag` as a string here, but the actual value is an array of strings, see:...

We should include out-of-the-box detection rules in Matano so users do not have to start from scratch for detection engineering. Similar to other vendors like Elastic, Chronicle, etc. we should...

enhancement
good first issue
help wanted