OSSEM

Open Source Security Events Metadata (OSSEM) is a community-driven project that focuses on documenting and standardizing security event logs across multiple operating systems, such as Windows, Linux, and MacOS. Its primary use case is to define a common data model and provide detailed data dictionaries to facilitate the normalization and analysis of security events, enhancing the ability to detect and respond to adversarial techniques. Notable features include schema tables for aggregating data entities, and a detection model aimed at developing data analytics based on the relationships among security events.