You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 6 Next »

Metron Consists of the following modules:

 

Module NameModule DescriptionCurrent VersionDocumentation ReferenceGithub Reference
metron-platform - metron-parsersTopology for normalizing telemetry from native sensor formats to the Metron JSON0.1BETAStreaminghttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-enrichmentTopology for enrichment of Metron JSON messages, cross referencing them against threat intel stores, and firing alerts0.1BETAStreaminghttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-pcapTopology for streaming network packets into HDFS for use with the PCAP Service0.1BETAPCAP Topologyhttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-apiService for running analytics/filtering on the PCAP files in HDFS put there by the PCAP Topology0.1BETAPCAP Servicehttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-Pcap_Service
metron-sensorsSensors feeding Metron dashboards and analytics0.1BETASensorshttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-MessageParsers
metron-platform - metron-data-managementLoaders for bulk loading enrichment and threat intelligence stores0.1BETAData Loadshttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-DataLoads
metron-uiMetron SOC Analyst UI0.1BETAUIhttps://github.com/apache/incubator-metron/tree/master/metron-ui
metron-deploymentScripts for automating Metron deployments0.1BETADeployment Scriptshttps://github.com/apache/incubator-metron/tree/master/deployment
  • No labels