iCreatAI News
Skip to content
Hacker News AI· dyalndjomou·· 18 days agoAI score34

Show HN: Fengarde–OCSF-native open-source SIEM with local AI triage (Apache-2.0)

Show HN: Fengarde–OCSF-native open-source SIEM with local AI triage (Apache-2.0)

AI summary

FENGARDE is an Apache-2.0, OCSF-native open-source SIEM that turns a raw log line into a verified incident and a draft NIS2 notification, built as nine services communicating only over a bus. The repository includes a demo where a real SSH brute force and DNS burst sent over UDP 5514 become a real alarm, plus a console with twelve views and a capability board marking anything stubbed or not built. The UDP syslog listener is unauthenticated, so port 5514 should be exposed only on a trusted network or VPN.

Source: Hacker News AI · supermhel.github.io