Unfetter
Unfetter is a reference implementation framework that collects events from client machines and performs CAR analytics using an ELK stack with Apache Spark to detect potential adversary activity.
Unfetter
Unfetter is a reference implementation framework that collects events from client machines and performs CAR analytics using an ELK stack with Apache Spark to detect potential adversary activity.
Unfetter Description
Unfetter is a reference implementation framework designed for collecting events from client machines and performing Cyber Analytic Repository (CAR) analytics to detect potential adversary activity. The framework operates through three integrated systems: - An analytic system built on an ELK stack with Apache Spark for data processing and analysis - A data ingestion system that collects events from client machines - An analytics system that performs CAR analytics to identify suspicious activities The tool focuses on implementing standardized analytics based on the MITRE CAR framework, which provides a knowledge base of analytics developed by MITRE based on the MITRE ATT&CK adversary model. This enables organizations to detect adversary behaviors and tactics across their infrastructure. Unfetter serves as a practical implementation guide for organizations looking to deploy CAR analytics in their security operations, providing both the technical framework and analytical capabilities needed for threat detection.
Unfetter FAQ
Common questions about Unfetter including features, pricing, alternatives, and user reviews.
Unfetter is Unfetter is a reference implementation framework that collects events from client machines and performs CAR analytics using an ELK stack with Apache Spark to detect potential adversary activity.. It is a Security Operations solution designed to help security teams with MITRE Attack, Open Source.
