OpenUBA screenshot

OpenUBA

Author Avatar Theme by Gacwr
Updated: 8 Jul 2022
429 Stars

A robust, and flexible open source User & Entity Behavior Analytics (UEBA) framework used for Security Analytics. Developed with luv by Data Scientists & Security Analysts from the Cyber Security Industry. [PRE-ALPHA]

Categories

Overview:

The Open User Behavior Analytics (OUBA) is a flexible open-source User & Entity Behavior Analytics framework designed for Security Analytics. Created by Data Scientists & Security Analysts from the Cyber Security Industry, this project aims to provide a transparent and customizable approach to user behavior analysis.

Features:

  • Open-Model Approach: Allows security analysts to understand the underlying models for anomalies, baselines, and cases.
  • Community-Driven Model Marketplace: Users can access and install security models from a marketplace, encouraging collaboration and model reuse.
  • Modular Architecture: Lightweight and SIEM-agnostic framework with components like Rule Engine, Dashboard, and Model Server for flexibility and scalability.

Installation:

To install the Open User Behavior Analytics (OUBA) framework, follow these steps:

  1. Clone the OUBA repository from GitHub:
    git clone [repository_url]
    
  2. Install the necessary dependencies using npm:
    npm install
    
  3. Start the OUBA server:
    npm start
    
  4. Access the OUBA dashboard through the provided address (e.g., localhost:3000) in your browser.

Summary:

The Open User Behavior Analytics (OUBA) framework offers a transparent and customizable solution for security analysts interested in understanding the models behind user behavior analysis. With features like an open-model approach, a community-driven model marketplace, and a modular architecture, OUBA provides users with the tools to enhance their security analytics practices.