News - OCA

April 14, 2025

Published by Jérôme Fellus on April 14, 2025

Integrations made easier with Meshroom

The cybersecurity industry faces a significant challenge: countless products need to integrate with each other to provide value to end users. This creates a massive, industry-wide integration problem due to the numerous integration requirements. Meshroom is a command-line tool to build and manage Cybersecurity Mesh Architectures (CSMA). It is part of the OXA sub-project under the Open Cybersecurity Alliance (OCA) and offers […]

September 26, 2024

Published by Charles Frick on September 26, 2024

Call for STIX-Shifter Maintainers

The Open Cybersecurity Alliance (OCA) is on a mission to break down the silos in cybersecurity, making it easier for tools and teams to collaborate in defending against evolving threats. Our open-source community is growing, and with that growth comes the need for passionate leaders who can help steer our initiatives to new heights. Today, we’re reaching out to the […]

March 15, 2024

Published by Claudia Rauch on March 15, 2024

Upcoming Events

Check out the latest events for OCA members.

March 11, 2024

Published by RoseAnn Guttierrez on March 11, 2024

OCA Community Connect: Not just another monthly meeting

Subscribe to the new OCA Community Connect Podcast. The podcast is an invitation to tune in, engage with the content, and join us in our mission to create a more secure, integrated, and collaborative cybersecurity ecosystem.

February 2, 2024

Published by Jane Harnad on February 2, 2024

Cybersecurity Automation Village

Join us for the next plugfest on 11-12 April. This is a Hybrid event. In-person space is limited. Welcome to the Cybersecurity Automation Village, hosted by the Open Cybersecurity Alliance (OCA) Cybersecurity Automation SubProject (CASP). This event brings together global cybersecurity vendors, end-users, thought leaders, and individuals passionate about cybersecurity automation. The CASP Community plans to hold a two day HYBRID event […]

September 14, 2023

Published by Kenneth Peeples on September 14, 2023

Announcing the Team Threat Hunting Project

Kestrel as a Service The Open Cybersecurity Alliance (OCA) is excited to announce the next milestone of the Kestrel subproject, Kestrel as a Service (KaaS). KaaS enables threat hunting at scale to improve threat detection. It is a Kestrel container and a deployable cloud-managed hunting service for large organizations. The project provides the code and instructions for deploying a […]

August 8, 2023

Published by Claudia Rauch on August 8, 2023

OCA and Kestrel at Black Hat 2023

At the Black Hat 2023 conference, attendees will hear from security experts sharing groundbreaking research at the Briefings, view demos of open-source tools at Arsenal, meet sponsors presenting a range of products and solutions in the Business Hall, and network with thousands of security professionals. Don’t miss out on the Kestrel session on Wednesday, 9 August, 1:00 PM – 2:30 […]

July 11, 2023

Published by Xiaokui Shu on July 11, 2023

Kestrel Data Retrieval Explained

Kestrel provides a layer of abstraction to compose hunt-flows with standard hunt steps that run across many data sources and data types. This blogs overviews how data is retrieved, processed, and stored in Kestrel, and explains the 10x data retrieval performance improvement through Kestrel 1.5, 1.6, and 1.7.