Prerequisites
Perform the following tasks before configuring threat intelligence feeds:
Choose your threat intelligence sources.
Recommended but not required: Install a threat intelligence feed aggregator, such as SoltraEdge.
- 1. HCP Information Roadmap
- 2. Introduction to Hortonworks CyberSecurity Suite
- 3. Configuring and Customizing
- Adding a New Telemetry Data Source
- Enriching Telemetry Events
- Configuring Indexing
- Using Threat Intelligence Feeds
- Prioritizing Threat Intelligence
- Setting Up Enrichment Configurations
- Configuring the Profiler
- Creating an Index Template
- Configuring the Metron Dashboard to View the New Data Source Telemetry Events
- Setting up PCAP to View Your Raw Data
- Troubleshooting Parsers
- 4. Monitor and Management
- 5. Concepts
- A. Stellar Language Functions