Graylog2 / Graylog2/graylog2-server
Add EDR Capability to Sidecar with script UI in Server
Open
feature
triaged
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
Graylog is missing an active response type engine.
Here is my idea:
Flag events with Pipeline rules and tag an event, if the event is tagged, contact sidecar's and execute action, this could be shutting down the system, killing a process/etc.
Contributor guide
Assessment
This issue has not been assessed yet.