BARAQ: Open-source SOC platform for real-time Windows threat detection
BARAQ tackles the need for on‑premise security monitoring by collecting Windows telemetry, normalizing events, and detecting attacks with both signature rules and machine‑learning models. It enriches alerts with MITRE ATT&CK mapping and presents them in an interactive dashboard for analysts. Designed for SOC teams and security engineers who require a lightweight, self‑hosted solution without cloud dependencies. Its hybrid risk scoring and incident workflow set it apart from generic log collectors.
View on GitHub →natahanjr/BARAQ