Tenzir provides a data pipeline engine for security teams to create data pipelines using modular components for data collection, processing, and storage. It focuses on reducing costs and improving data management for security use cases.

Tenzir

Tenzir provides a data pipeline engine for security teams, enabling the creation of data pipelines from various data sources and facilitating data management for security operations. Self-described as open-core, it utilizes open standards for data processing.

Tenzir | 1,714 followers on LinkedIn. Open-source Security Data Pipelines | At Tenzir, we&#39;re pioneering the future of open-source security operations with a revolutionary concept - SecDataOps.

Our mission? To transform the foundational framework of cybersecurity operations.

Michael Hochholzer

VC Investor l Cyber Security, SaaS, AI, IoT, Quantum | Early Stage | Managing Partner at eCAPITAL Art by Noah Becker

Dirk Seewald

Senior Analyst turned Office Manager

Annina Palin

Managing Director Tenzir (COO & VP Sales)

Johan Hesse

SuriCon is in full swing and we're excited to be back again! 🧡 Our talk on Friday will showcase how you can use Tenzir to map your Suricata EVE JSON to #OCSF and derive contextual information for passive inventorization and asset tracking. Our mappings from the talk will be #opensource and available as Tenzir package in the library. 🫶 Suricata Project | Open Information Security Foundation Eric LEBLOND Kelley Misata, Ph.D. Dominik Lohmann Benno Evers

🚀 Excited to announce our upcoming talk at SuriCon 2024! 🚀 We’ll dive into the Open Cybersecurity Schema Framework ( #OCSF ), which is gaining momentum as the first cross-vendor standard to normalize event logs. 🌐 Why does this matter? With a standardized schema, threat hunting, detection engineering, and incident response can be fully decoupled from data acquisition, making security workflows more agile. Here’s what we’ll cover: 1️⃣ Mapping Suricata EVE JSON to OCSF We've mapped Suricata logs to OCSF using our Tenzir Query Language (TQL), and we're sharing these mappings open source for the community. 2️⃣ Entity Extraction & Enrichment Suricata logs are a treasure trove of metadata, providing insights like MAC-to-IP (DHCP), IP-to-hostname (DNS), and username-to-hostname mappings. After normalizing these logs to OCSF, we're building generic context tables for enriched threat intelligence and detection. Think passive DNS but taken further—“passive anything” for inventorization and asset tracking over time. We’re also open-sourcing the extraction pipelines to make these capabilities accessible to all. Hope to see you on 👉 Fri, Nov 15 👈! Speakers are Tenzir's Dominik Lohmann and Matthias Vallentin , and Sascha S. from DCSO Deutsche Cyber-Sicherheitsorganisation GmbH .

Coming in third, but celebrating the hardest! 🏆

Your #SIEM and #SecurityDataLake projects without a solid data layer.

🌟 Exciting news: Our SOVEREIGN project has entered the next phase of funding! This groundbreaking initiative aims to transform how we protect critical infrastructure against cyber threats. With a total budget of €10 million, we’re partnering with the University of Hamburg and an impressive consortium—including Airbus Operations, Fraunhofer AISEC , DCSO Deutsche Cyber-Sicherheitsorganisation GmbH , Helmut-Schmidt-Universität/Universität der Bundeswehr Hamburg , Universität zu Lübeck , and Langlauf Security Automation GmbH —to build an advanced cyber defense platform. 🛡️ SOVEREIGN is more than just a project; it’s a forward-thinking vision for cybersecurity. By leveraging AI and Zero-Trust architectures rooted in open standards, we’ll be working over the next three years to bolster the resilience and digital sovereignty of our critical infrastructures. A big thank you to our partners for their dedication and expertise! 🙌 Let’s shape the future of #CyberDefense together. Stay tuned for more updates as we move forward on this journey! 🌍✨ 👉 Learn more about the SOVEREIGN Project on our website: https://lnkd.in/eruX9a5p #Cybersecurity #Innovation #DigitalSovereignty #CriticalInfrastructure

We've been cranking out connectors and packages, making Tenzir even easier to use. New bi-directional connectors include Azure Blob Storage and Google Cloud Pub/Sub. We also added packages for 1-click sending to Splunk and enriching your network telemetry with FoxIO 's JA4DB. 📚 Our package library is #opensource : head over to https://lnkd.in/errm_e-Y to study and contribute! Anything missing? Just let us know and we'll add the fitting piece to the puzzle.

💥 #CyberChess in Riga was an incredible experience, providing the chance to connect with some of the most dedicated and skilled professionals in technical security. 🥷 During my keynote, titled “Open, Composable, Unstoppable: The Next Gen of Threat Hunting”, I discussed the pressing challenges in scaling #threathunting to the next level. The toughest issue? Data – how it’s moved, transformed, encoded, and stored. At Tenzir , this exactly what contribute to the modern #SecOps stack. A personal highlight of the event was receiving a chess lesson from none other than grandmaster Dana Reizniece-Ozola! ♟️👩🏫⭐ Huge thanks to CERT.LV for hosting such an outstanding event and bringing together such a diverse and fascinating group of people. I’m already looking forward to next year! 🙏

Matthias Vallentin

🚀 Tenzir is nominated for the 10th German IT Security Award (10. Deutscher IT-Sicherheitspreis)! 🎉 The nomination for the prestigious German IT Security Award, conferred by the Horst Görtz Stiftung , is an exciting recognition for Tenzir's innovative Security Data Pipeline platform. 🏆 Our solution enables cyber defenders to manage their security data more efficiently and their productivity. A big thank you to the entire team for their relentless effort and creativity! 👏💡 The award ceremony promises to be exciting, and it’s an honor to be among the nominees. Stay tuned! #Innovation #CyberSecurity

Our new FoxIO JA4+ package makes your #JA4 + light up! Find out what OS, user agent, or the application of your (encrypted) connections—thanks to https://ja4db.com . The package in our library comes with a lookup table context that gets updated periodically with a pipeline. Just provide your update interval as input and click the install button. Easy! This package is part of our #opensource community library hosted at GitHub. Try it out yourself for free at app.tenzir.com . John Althouse Josh Alexander, CFA Hunter Chemelli Thatcher Thornberry

If you work with #AmazonSecurityLake (ASL), we got you covered: bring your security data in, transformed to OCSF by our pipelines, at no extra normalization/mapping cost! You just pay for storage. Oh, did we mention that Zstd-compress our Parquet files by default? Expect up to 90% space savings.

TENZ

COM:TENZIR

Tenzir