Overview:
The Open User Behavior Analytics (OUBA) is a flexible open-source User & Entity Behavior Analytics framework designed for Security Analytics. Created by Data Scientists & Security Analysts from the Cyber Security Industry, this project aims to provide a transparent and customizable approach to user behavior analysis.
Features:
- Open-Model Approach: Allows security analysts to understand the underlying models for anomalies, baselines, and cases.
- Community-Driven Model Marketplace: Users can access and install security models from a marketplace, encouraging collaboration and model reuse.
- Modular Architecture: Lightweight and SIEM-agnostic framework with components like Rule Engine, Dashboard, and Model Server for flexibility and scalability.
Installation:
To install the Open User Behavior Analytics (OUBA) framework, follow these steps:
- Clone the OUBA repository from GitHub:
git clone [repository_url]
- Install the necessary dependencies using npm:
npm install
- Start the OUBA server:
npm start
- Access the OUBA dashboard through the provided address (e.g., localhost:3000) in your browser.
Summary:
The Open User Behavior Analytics (OUBA) framework offers a transparent and customizable solution for security analysts interested in understanding the models behind user behavior analysis. With features like an open-model approach, a community-driven model marketplace, and a modular architecture, OUBA provides users with the tools to enhance their security analytics practices.