Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/endgameinc/varna
Varna: Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL)
https://github.com/endgameinc/varna
Last synced: 18 days ago
JSON representation
Varna: Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL)
- Host: GitHub
- URL: https://github.com/endgameinc/varna
- Owner: endgameinc
- License: apache-2.0
- Created: 2019-10-24T21:40:25.000Z (about 5 years ago)
- Default Branch: master
- Last Pushed: 2022-12-26T21:00:38.000Z (almost 2 years ago)
- Last Synced: 2024-08-01T08:09:13.832Z (4 months ago)
- Language: CSS
- Homepage:
- Size: 1.37 MB
- Stars: 50
- Watchers: 8
- Forks: 5
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
## Varna
Varna is an AWS serverless cloud security tool that parses and alerts on CloudTrail logs using Event Query Language (EQL). Varna is deployed as a lambda function, for scanning and serving web requests, and a dynamodb table, for keeping track of seen alerts. Varna is cheap & efficient to run, costing less than 15 dollars a month with proper configuration and ingesting alerts as soon as CloudTrail stores them in S3.
You can find more information to install on how to install Varna in the [install.md](install.md).
All of the rules can be found in the `rules` folder and should be fairly understandable.
Features:
* Quick setup, takes less than 10 minutes to setup & deploy using Zappa.
* Easy to enable slack & email notifications.
* Rules are quick to write and easy to understand.
* Easy to enable user authentication.
* Simple code, readable by a single human in a couple of hours.
* Past search in the web console for finding additional context.Varna is basically feature complete for our needs, the only outstanding work that might be done is incorporating SAML authentication or a method for bulk past search. If you have questions or would like to discuss a new feature, feel free to email me.
Some quick screenshots of the web interface:
![List Alarms](/screenshots/varna-dev-list-alarms-example.png)
![Past Search](/screenshots/varna-dev-search-query-example.png)