Anzenna vs SATARK

Anzenna has no write-up on Specifiction yet; its figures are above.

SATARK is a free, MIT-licensed, open-source security analytics framework for building explainable detection pipelines. Its domain-agnostic process collects, normalizes, detects, scores and explains findings, using separate plugins for security domains. Listed plugins cover insider threats, malware, phishing, web, email, cloud and identity. The insider plugin is implemented for behavioral spikes in USB and file activity per actor, and can map findings to MITRE ATT&CK techniques such as T1091 and T1020 when available. The other listed plugins are heuristic stubs. Risk scores are intended to show contributing factors, evidence, confidence, reasoning and knowledge references. AI may assist with summaries, but detections should remain reproducible without an LLM. SATARK is an early open-source alpha rebuild with evolving APIs, packaging and plugin coverage; documentation says not to treat it as production-ready without independent evaluation. Installation requires Python 3.13 or later and uv. The project names Kaushal Bhavsar as creator and traces its introduction to 2011 as Project Satark.