Apache Spot (incubating)

Processes network flows, DNS packet captures, and proxy logs for comprehensive visibility, as specified in the Telemetry section, enabling detection of lateral movement and data exfiltration.

Uses Hadoop and a parallel ingest framework with open-source decoders to handle massive volumes of data, making it suitable for cloud-scale environments, as highlighted in the Parallel Ingest Framework.

Applies machine learning to filter billions of events down to thousands of suspicious activities, focusing on hard security problems like stealthy attacks, per the Machine Learning section.

Offers an open-source alternative with active maintainers and contribution guidelines, allowing customization and avoiding vendor lock-in, as seen in the Community Support and Contributing sections.