Performing Threat Triage Using the CLI
The perform threat triage using the CLI, you must complete the following steps:
- 1. HCP Information Roadmap
- 2. Introduction to Hortonworks CyberSecurity Suite
- 3. Configuring and Customizing
- Adding a New Telemetry Data Source
- Enriching Telemetry Events
- Configuring Indexing
- Using Threat Intelligence Feeds
- Prioritizing Threat Intelligence
- Setting Up Enrichment Configurations
- Global Configuration
- Configuring the Profiler
- Creating an Index Template
- Configuring the Metron Dashboard to View the New Data Source Telemetry Events
- Setting up pcap to View Your Raw Data
- Troubleshooting Parsers
- 4. Monitor and Management
- Understanding Throughput
- Updating Properties
- Updating ZooKeeper
- Managing Sensors
- Monitoring Sensors
- Starting and Stopping Parsers
- Starting and Stopping Enrichments
- Starting and Stopping Indexing
- Modifying the Elasticsearch Template
- Pruning Data From Elasticsearch
- Backing up the Metron Dashboard
- Restoring Your Metron Dashboard Backup
- 5. Concepts