Versions Compared

Old Version 7

changes.mady.by.user George Vetticaden

Saved on

compared with

New Version Current

changes.mady.by.user Casey Stella

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Metron Components

Metron Modules

Metron Consists of the following modules:

...

Module NameModule DescriptionCurrent VersionDocumentation ReferenceGithub Reference
metron-platform - metron-parsersTopology for normalizing telemetry from native sensor formats to the Metron JSON0.1BETAStreaminghttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-enrichmentTopology for enrichment of Metron JSON messages, cross referencing them against threat intel stores, and firing alerts0.1BETAStreaminghttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-pcapTopology for streaming network packets into HDFS for use with the PCAP Service0.1BETAPCAP Topologyhttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-apiService for running analytics/filtering on the PCAP files in HDFS put there by the PCAP Topology0.1BETAPCAP Servicehttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-Pcap_Service
metron-sensorsSensors feeding Metron dashboards and analytics0.1BETASensorshttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-MessageParsers
metron-platform - metron-data-managementLoaders for bulk loading enrichment and threat intelligence stores0.1BETAData Loadshttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-DataLoads
metron-uiMetron SOC Analyst UI0.1BETAUIhttps://github.com/apache/incubator-metron/tree/master/metron-ui
metron-deploymentScripts for automating Metron deployments0.1BETADeployment Scriptshttps://github.com/apache/incubator-metron/tree/master/deployment

Domain Specific Languages

In Metron, we have two domain specific languages which are used for filtering and simple data transformation:

 

Logical Architecture

The below diagram depicts the logical components of the Metron Platform.

Image RemovedImage Added

The below subsection traces an event as it flows through these different logical components.

...