impulse-xdr

” for host intrusion detection, and “heavy” sensor with network IDS capabilities). It’s designed to be fast and easy to use, so it installs in 5 mins on as little as 1.5 gb RAM, 1-core VM. Repository: https://github.com/bgenev/impulse-xdr Web: https://impulse-xdr.com/ You can use Impulse to immediately start monitoring a server, personal Desktop, or local VM (to test it out). Main features include: - Security Analytics: Ingests telemetry data from its fleet of monitoring sensors and provides security analytics & insights. - Integrity monitoring for every aspect of your environment - files, processes, connections, ports, users, authentications, installed packages, kernel modules, etc. every variable that could be an indicator of compromise is tracked and stored in “IOCs History” table. - Network Visibility & IDS: Monitors network flows, detects intrusion attempts and automatically blocks offenders with active response. - Security Policies: Monitors system configuration settings to ensure compliance with preset core security policies and provides CIS-benchmark reports. - Active Response: Blocks suspicious IPs, stops processes, closes ports and quarantines files. - Fleet Firewall: nftables-based fleet firewall blocks offenders across the fleet. - Threat Intel: Integrates with high-quality threat intelligence providers to enrich your context data. - Vulnerability Scanning: Discovers installed packages and associated CVEs. - Self-Hosted & Open-Core: Data never leaves you servers. Please feel free to share any requests for further development, this will be a community-driven project. Roadmap: the next major iteration will have custom secure configuration packs, so that users can create checks specific to their infrastructure.