Unfetter is a reference implementation framework designed for collecting events from client machines and performing Cyber Analytic Repository (CAR) analytics to detect potential adversary activity. The framework operates through three integrated systems: - An analytic system built on an ELK stack with Apache Spark for data processing and analysis - A data ingestion system that collects events from client machines - An analytics system that performs CAR analytics to identify suspicious activities The tool focuses on implementing standardized analytics based on the MITRE CAR framework, which provides a knowledge base of analytics developed by MITRE based on the MITRE ATT&CK adversary model. This enables organizations to detect adversary behaviors and tactics across their infrastructure. Unfetter serves as a practical implementation guide for organizations looking to deploy CAR analytics in their security operations, providing both the technical framework and analytical capabilities needed for threat detection.