Strelka

From https://github.com/target/strelka:

Strelka is a real-time file scanning system used for threat hunting, threat detection, and incident response. Based on the design established by Lockheed Martin’s Laika BOSS and similar projects (see: related projects), Strelka’s purpose is to perform file extraction and metadata collection at huge scale.

Warning

Please keep in mind we do not officially support Strelka, so installation is at your own risk.

Installation

For installation instructions, please see https://github.com/weslambert/securityonion-strelka.