Security Analytics in OpenSearch 2.4: detectors and Sigma rules in the cluster
OpenSearch 2.4 (15 November 2022) brings the experimental Security Analytics plugin: detectors, field mapping, and 2,000+ pre-packaged Sigma rules translated into queries on top of the alerting engine already present.
Read more