Versions Compared

Old Version 8

changes.mady.by.user George Vetticaden

Saved on

compared with

New Version Current

changes.mady.by.user Casey Stella

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Metron Components

Metron Modules

Metron Consists of the following modules:

...

Module NameModule DescriptionCurrent VersionDocumentation ReferenceGithub Reference
metron-platform - metron-parsersTopology for normalizing telemetry from native sensor formats to the Metron JSON0.1BETAStreaminghttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-enrichmentTopology for enrichment of Metron JSON messages, cross referencing them against threat intel stores, and firing alerts0.1BETAStreaminghttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-pcapTopology for streaming network packets into HDFS for use with the PCAP Service0.1BETAPCAP Topologyhttps://github.com/apache/incubator-metron/tree/master/metron-streaming
metron-platform - metron-apiService for running analytics/filtering on the PCAP files in HDFS put there by the PCAP Topology0.1BETAPCAP Servicehttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-Pcap_Service
metron-sensorsSensors feeding Metron dashboards and analytics0.1BETASensorshttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-MessageParsers
metron-platform - metron-data-managementLoaders for bulk loading enrichment and threat intelligence stores0.1BETAData Loadshttps://github.com/apache/incubator-metron/tree/master/metron-streaming/Metron-DataLoads
metron-uiMetron SOC Analyst UI0.1BETAUIhttps://github.com/apache/incubator-metron/tree/master/metron-ui
metron-deploymentScripts for automating Metron deployments0.1BETADeployment Scriptshttps://github.com/apache/incubator-metron/tree/master/deployment

Domain Specific Languages

In Metron, we have two domain specific languages which are used for filtering and simple data transformation:

 

Logical Architecture

The below diagram depicts the logical components of the Metron Platform.

...