Description

Apache Metron is a big-data security analytics framework designed for forensic investigators, security platform engineers, and security data scientists. It enables users to monitor the security SIEM tools, investigate on breaches and malware attacks, review alerts and determine to escalate as tickets or filter out, investigate script kiddie attacks, generate lawyer’s response to breaches by collecting evidence on attack incident, visualize alerts labeled with threat intel from the third party feeds, validate data on ingest, as well as share dashboards and substitute variables to modify graph types. Features include message optimization, user interface (UI) customization, inventory management, user identity management, schema validation, Zeppelin support, and Jupyter integration.