issues
search
matanolabs
/
matano
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
https://matano.dev
Apache License 2.0
1.4k
stars
97
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Feature Request: GuardDuty managed log source
#191
britton-from-notion
opened
1 week ago
0
Updates and fixes
#190
Samrose-Ahmed
closed
1 month ago
0
Snyk managed integration new URL endpoint.
#189
ubpomelo
closed
4 months ago
1
[Blocked] Unable to deploy Matano in a fresh AWS account - Lambda runtime deprecation for NodeJS 14.x
#188
IMG-PRCSNG
closed
1 month ago
7
o365
#187
swingersil
opened
6 months ago
0
Cloudflare HTTP Event Log Source Schema is incorrect for `BotTags`
#186
deeso
opened
7 months ago
1
Update avro.rs
#185
gromit6891
closed
7 months ago
0
Error: An error occurred: Access Denied
#184
ubpomelo
closed
4 months ago
0
Update system workgroup to Athena Engine Version 3
#183
Samrose-Ahmed
closed
7 months ago
2
Remove bracket in VRL to fix o365 log ingest
#182
clairecasalnova-cisa
closed
7 months ago
0
Expected Lambda Throttling Behavior and Performance Benchmarks
#181
damon-edstrom
opened
9 months ago
0
Faulty Metadata `file_path` Pointers
#180
damon-edstrom
opened
9 months ago
0
Github Audit - Define `token_id` field statically as long or string
#179
damon-edstrom
closed
9 months ago
2
🐛 Fix bug managed log source config name
#178
shaeqahmed
closed
10 months ago
0
Zeek log source does not accept TSV format
#177
hilt86
opened
10 months ago
0
pin AVRO version in transformer to keep using rust 1.64 (due to cargo-lambda / GH build setup)
#176
shaeqahmed
closed
10 months ago
0
Add our expire snapshots to fix Athena ICEBERG_CANNOT_OPEN_SPLIT
#175
shaeqahmed
closed
10 months ago
0
fix: allows enable/disable of detections via config file
#174
rileydakota
opened
11 months ago
4
How to just deploy matano in environments where cloud provisioning is guardrail-ed and controlled
#172
RVaidhy
opened
11 months ago
3
Fix newly added PANW threat schema, fix error logging, update avro dep
#171
shaeqahmed
closed
11 months ago
0
Fix: Prevent confusing error when invalid detection deployed
#170
shaeqahmed
closed
11 months ago
0
concat record batches in lake writer
#169
Samrose-Ahmed
closed
11 months ago
0
Add versioning to Matano Lake storage bucket
#168
Samrose-Ahmed
closed
11 months ago
0
Enable versioning on Matano-managed buckets
#167
timoguin
closed
11 months ago
0
fix: adds lookup_keys for cisa_kev enrichment table
#166
rileydakota
closed
11 months ago
2
Fixes for PANW, O365, UrlHaus parsers - timestamp fields, event.severity as numerical
#165
shaeqahmed
closed
11 months ago
0
Add PANW Threat Logs
#164
shaeqahmed
closed
1 year ago
0
Adds CISA Known Exploited Vulnerabilities as a managed enrichment table
#162
rileydakota
closed
1 year ago
4
fix: lake_writer: group writes by schema
#159
Samrose-Ahmed
closed
1 year ago
0
Populate client.ip for GitHub Enterprise audit logs
#158
timoguin
closed
1 year ago
0
GitHub audit logs can optionally include client IP addresses
#157
timoguin
closed
1 year ago
0
Make transformer able to handle larger files by streaming
#156
Samrose-Ahmed
closed
1 year ago
0
large file sizes causing OOMKills and timeouts
#155
timcosta
opened
1 year ago
4
docs: add chrismsnz as a contributor for code
#154
allcontributors[bot]
closed
1 year ago
0
Add Teleport Audit logs log source.
#153
Samrose-Ahmed
closed
1 year ago
2
parser: Add additional CloudTrail fields
#152
Samrose-Ahmed
closed
1 year ago
0
Feature Request: Add options pertaining to snapshot expire schedule as part of config
#151
rams3sh
opened
1 year ago
2
teleport - Managed Log Source
#150
chrismsnz
closed
11 months ago
2
minor: Emit some more logs
#149
Samrose-Ahmed
closed
1 year ago
0
feat: improve alerting
#148
Samrose-Ahmed
closed
1 year ago
0
Feature Request: Support for AWS Health Events
#147
rams3sh
opened
1 year ago
0
Add PANW logs support + S3 Access Roles for BYO buckets
#146
shaeqahmed
closed
1 year ago
0
Add AWS SES alert target
#145
kai-ten
closed
1 year ago
1
fix: detection: dont error in alerting in case no event field
#144
Samrose-Ahmed
closed
1 year ago
0
Fix Iceberg maintenance
#143
Samrose-Ahmed
closed
1 year ago
0
Enable Custom alert_context in Alert
#142
shaeqahmed
opened
1 year ago
0
Documentation: Request to add detailed architecture diagram and explanation as part of documentation
#141
rams3sh
opened
1 year ago
0
Feature Request: Request for having a config option to set the log retention (cloudwatch, S3 Objects)
#140
rams3sh
opened
1 year ago
0
Add duplicate tracking for data batcher.
#139
Samrose-Ahmed
closed
1 year ago
0
Allow a detection to define how many alerts occurred
#138
chrismsnz
opened
1 year ago
0
Next