Strelka
Strelka is a real-time, container-based file scanning system that performs file extraction and metadata collection at enterprise scale for threat hunting, detection, and incident response.

Strelka
Strelka is a real-time, container-based file scanning system that performs file extraction and metadata collection at enterprise scale for threat hunting, detection, and incident response.
Strelka Description
Strelka is a real-time, container-based file scanning system designed for threat hunting, threat detection, and incident response operations. The platform performs file extraction and metadata collection at enterprise scale, allowing users and systems to submit files for analysis and reporting purposes. Built with a core codebase using Go and Python 3.10+, Strelka operates through server components that run in containers to provide deployment flexibility. The system includes OS-native client applications supporting Windows, Mac, and Linux platforms, utilizing cross-platform and cross-language compatible libraries and formats. The platform functions as a modular data scanning system that analyzes, extracts, and reports file content and metadata. When integrated with SIEM systems, Strelka can aggregate data, generate alerts, and provide analysts with environmental insights without requiring direct data gathering or manual file analysis processes. Originally based on the design principles established by Lockheed Martin's Laika BOSS and similar projects, Strelka distinguishes itself through its containerized architecture, cross-platform client support, and modern programming language implementation.
Strelka FAQ
Common questions about Strelka including features, pricing, alternatives, and user reviews.
Strelka is Strelka is a real-time, container-based file scanning system that performs file extraction and metadata collection at enterprise scale for threat hunting, detection, and incident response.. It is a Security Operations solution designed to help security teams with File Analysis.
ALTERNATIVES
Malware scanning tool for DFIR using 40+ engines from ReversingLabs
Malware analysis platform for SOC teams with binary analysis and threat detection
Incident investigation tool for info risks, user activity, and file exposure.
Email forensics tool for analyzing MIME header fields across 20+ formats.
FIM and config change monitoring tool with baseline deviation detection.
POPULAR
TRENDING CATEGORIES
Stay Updated with Mandos Brief
Get strategic cybersecurity insights in your inbox