GitXplorerGitXplorer
D

Beaver

public
7 stars
1 forks
0 issues

Commits

List of commits on branch main.
Verified
aa20d81f212a7d30aafcf12817caa129a0c76bfe

Update README.md

DDIvkov575 committed a month ago
Verified
f6616af9c268766646198e4089ad2dee0033e39a

Update README.md

DDIvkov575 committed 3 months ago
Unverified
ea1bea690eaea2ba674a1b8a36ee3226dcafbbf9

chanages to vm.rs & deploy.rs

DDIvkov575 committed 6 months ago
Unverified
6c82dbd5b2efeb580e89ee71fdb16d2595964eee

deleted crs.rs

DDIvkov575 committed 6 months ago
Unverified
5d79c036586edff1342ca91dc3caf3ad38c0d80b

removed unused batch condition from utilities.rs -> generate_vector_config

DDIvkov575 committed 8 months ago
Unverified
020d88c973fe5d81737b3cd63412819935c31d92

added vm file

DDIvkov575 committed 9 months ago

README

The README file for this repository.

🦫 Beaver SIEM

Secure. Analyze. Monitor.

Beaver SIEM is a cutting-edge data security log analysis tool designed to protect your infrastructure by monitoring and analyzing logs in real-time. It ensures your system’s safety by helping identify potential security breaches and threats through advanced log parsing and analysis techniques.


🚀 Build

To get started with Beaver SIEM, you will need to install and build it using the standard tools. Make sure to set up the required environment before proceeding.

Cargo install --release --path .

⚙️ This step will build Beaver SIEM in release mode. Reload shell after install


🛠️ Setup

After building, you can initialize Beaver SIEM through a simple setup process that creates the necessary configurations and sets up your environment.

Beaver init

⚙️ Ensure that your system has the required permissions and environment variables configured.


📋 Current Todo:

The following tasks are in progress or planned for the next release:

  • l_0 - crj shutoff - missing {} as second arg in the last .get() chain method call
  • l_1 - Add SA delegation - destructured log -> BQ - logging

💡 Ideas for Future Enhancements:

  • Disable detections_gen.py regeneration to streamline the development process.

  • Implement batching to improve efficiency in BigQuery by deduplicating writes after log destructuring.

    📝 This will help reduce the amount of redundant data being written, enhancing write efficiency.


Current Progress:

  • Create Cloud Run jobs.
  • Set up BigQuery.
  • Create Pub/Sub topic (1) and subscription (2) for BigQuery integration.
  • Provision storage bucket for log storage.
  • Link Cloud Run jobs to storage bucket for secure storage and retrieval.

“Stay secure, stay informed.”