ocsf

Open-Source Network Management, Monitoring, ITOM, and Security Analytics

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

collector

OXA - Open XDR architecture

OCSF-Tool: A command-line utility for managing Open Cybersecurity Schema Framework (OCSF) schemas, Supporting Proto file generation for OCSF Schemas.

Go implementation of Open Cybersecurity Schema Framework (OCSF) for standardized cybersecurity data handling, ensuring easy integration and high performance in Go applications.

Open-source SIEM pipeline: raw security logs → OCSF → correlation rules → alerts. OT and IT in one pipeline. Local-first AI triage, 10-minute self-hosted quickstart.

Schema mappings in SQL and PySpark for ELT pipelines to normalize data to OCSF

Honeypot as code. Engage the adversary. Cultivate the data.

OCSF schema for Rust

Accelerating Triage and Investigation: A Terminal-First, OCSF-Native Approach to Incident Investigation

Extracts and structures Fortigate Log Reference documentation into machine-readable CSV schemas, and translates them into ECS and OCSF field mappings. Built for security engineers and data teams building parsers, normalization pipelines, or field references.

Implementation of OCSF Schemas in Golang

131 deterministic cloud & AI security skills — OCSF 1.8, MCP tools, HITL-gated remediation. AWS · GCP · Azure · K8s · SaaS.

Extracts and structures PAN-OS syslog field documentation into machine-readable CSV schemas, and translates them into ECS and OCSF field mappings. Built for security engineers and data teams building parsers, normalization pipelines, or field references.

Security analytics data lake for TrustOps evidence: governance datasets, findings pipelines, compliance analytics, audit trails, and control-plane reporting.

This is a park management app built in java and uses the mysql engine for database querys

Normalise security alerts from six SIEM/vendor formats into one OCSF (1.8.0) Detection Finding schema. Synthetic data; production-quality reference for OCSF normalisation.

ZerLi online flower and bouquet store chain that covers mosts of the chain's needs, from POS, stock management, worker management, client side shop,...., to the delivery interface.

Timestomping malware detection framework + arena with RL agent baselines, based on Doctor Who.