Prerequisites
Before you can prioritize a threat intelligence enrichment, you must ensure that the enrichment is working properly
- 1. HCP Information Roadmap
- 2. Introduction to Hortonworks CyberSecurity Suite
- 3. Configuring and Customizing
- Adding a New Telemetry Data Source
- Enriching Telemetry Events
- Configuring Indexing
- Using Threat Intelligence Feeds
- Prioritizing Threat Intelligence
- Setting Up Enrichment Configurations
- Configuring the Profiler
- Creating an Index Template
- Configuring the Metron Dashboard to View the New Data Source Telemetry Events
- Setting up PCAP to View Your Raw Data
- Troubleshooting Parsers
- 4. Monitor and Management
- 5. Concepts
- A. Stellar Language Functions