uPolicyCraft - synthesizing and monitoring effect graph policies on SysFlow telemetry
SysFlow is a cloud-native system telemetry framework that enables the creation of security analytics on a scalable, pluggable open-source platform.
Recent Posts
SysFlow 0.6.0
Today we announce the release of SysFlow 0.6.0!
Cloud Metadata Support
Today’s workloads are increasingly moving to cloud environments, while at the same time becoming more interconnected and complex. Typical applications now co...
SysFlow 0.5.0
Today we announce the release of SysFlow 0.5.0!
SysFlow 0.4.0
Today we announce the release of SysFlow 0.4.0!
See the forest for the trees: glimpse the storyline of an attack using MITRE tags
With compute infrastructures being monitored quite closely these days, many events and alerts are created and collected at all times. While individual events...
Getting started with the Open Hunting Stack in Hybrid Cloud with Kestrel and SysFlow
Today, we are going to discuss how to combine SysFlow, Kestrel, and ELK (or simply Elastic) to enable threat hunting in a hybrid cloud environment. This post...
SysFlow ELK integration
As of release 0.3.0-rc2, sf-processor can write SysFlow telemetry records to Elastic!
Welcome!
Welcome to the SysFlow blog! We are thrilled you’re here!