A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [PRE-ALPHA]

User Behavior Analysis System base on microservice.

Analysis of HTTP traffic and detection of anomalous user behavior in allowed actions. UEBA system.

Anomaly detection and monitoring software

This repository contains scripts to carry out anomaly detection in the CLUE log data set.

Outlines a scalable SOC optimization approach tailored for Palo Alto Networks Cortex XSIAM.

Working white paper for OpenUBA

frontend, model registry, model search, and model marketplace for OpenUBA

A digital immune system designed to detect and neutralize identity-based threats from within an organization

ITDR (Identity Threat Detection and Response) platform with ML-powered anomaly detection, UEBA, risk scoring, and role mining

A conceptual architecture designed to make file-based malware attacks fundamentally impossible

An end-to-end AI system for detecting insider threats using a hybrid machine learning approach (Isolation Forest + XGBoost). Features a high-performance ETL pipeline using DuckDB, real-time inference via FastAPI, and integrated Explainable AI (SHAP) for transparent risk assessment on the CERT R4.2 dataset.