https://github.com/snowflakedb/SnowAlert

Security Analytics Using The Snowflake Data Warehouse
https://github.com/snowflakedb/SnowAlert

Last synced: 4 months ago
JSON representation

Security Analytics Using The Snowflake Data Warehouse

• Host: GitHub
• URL: https://github.com/snowflakedb/SnowAlert
• Owner: snowflakedb
• License: apache-2.0
• Created: 2018-05-01T17:13:16.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2024-03-07T15:04:30.000Z (4 months ago)
• Last Synced: 2024-03-07T16:06:03.379Z (4 months ago)
• Language: Python
• Homepage:
• Size: 127 MB
• Stars: 178
• Watchers: 15
• Forks: 57
• Open Issues: 123
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md
  • Security: SECURITY.md

Lists

• awesome-stars - snowflakedb/SnowAlert - Security Analytics Using The Snowflake Data Warehouse (Python)

README

        
[![CircleCI](https://circleci.com/gh/snowflakedb/SnowAlert.svg?style=svg)](https://circleci.com/gh/snowflakedb/SnowAlert)



  



SnowAlert is a security analytics framework that uses the Snowflake Cloud Data Platform to detect security incidents and policy violations.

## Data-Driven Security

At Snowflake, we switched from our old SIEM to putting all of our security logs and asset details into Snowflake.

Having our security data in Snowflake means that we can define advanced correlated alerts that are more reliable and less noisy.

We hope that Snowflake customers can do better data-driven security using Snowflake and that this project will make getting started easy.

Ready? Let's [get started!](https://snowalert.readthedocs.io/en/latest/pages/start.html "SnowAlert Documentation")

## Native Snowflake features

Snowflake now supports native [Alerts and Notifications](https://docs.snowflake.com/guides-overview-alerts) which can be used for some generic alerting use-cases.

For other RPC's, you can also use [External Functions](https://docs.snowflake.com/en/sql-reference/external-functions-introduction) either manually created

or through a generic backend like [GEFF](https://github.com/Snowflake-Labs/geff/).

## License

This project is licensed under the Apache 2.0 License - see the [LICENSE](LICENSE) file for details.