Show HN: Fengarde–OCSF-native open-source SIEM with local AI triage (Apache-2.0)
FENGARDE turns a raw log line into a verified incident and a draft NIS2 notification.
以下正文同步自 Hacker News 最新，版权归原站所有，已转换为易读排版。
GitHub
FENGARDE turns a raw log line into a verified incident and a draft NIS2 notification.
Seven things FENGARDE does that a log viewer does not. Each names the place in the repository where you can check it.
No service calls another. Each reads topics from the bus and writes topics back, so any stage can be restarted, swapped or scaled alone. Every box opens its directory on GitHub, and during a replay the boxes light as the attack passes through them.
Every capability gets the board's honest word. Anything stubbed, opt-in or not built says so.
Read straight from the rule files in the repository: level, title and the MITRE ATT&CK (or ATLAS, or ICS) tag each one carries.
Each tile opens that view of the real console on the recorded data.
Recorded in a scripted browser against a running stack. A real SSH brute force and a DNS burst go in over UDP 5514 at about 0:30.
正文由 探How 从来源站点 RSS 同步，内容未经改写；遇到排版缺失或需要图片、视频时请以原文为准。