Stream Data into HCP
The first step in adding a new data source telemetry is to stream all raw events from the telemetry data source into its own Kafka topic.
Hortonworks Cybersecurity Platform
Also available as:
- Introduction to the HCP Runbook
- Adding a New Telemetry Data Source
- Transform the Squid Message
- Enriching Telemetry Events
- Enriching Threat Intelligence Information
- OPTIONAL: Create a Mock Threat Intel Feed Source
- Configure an Extractor Configuration File
- Using Stellar Data to Transform Threat Intelligence Data
- Configure Element-to-Threat Intelligence Feed Mapping
- Run the Threat Intelligence Loader
- Map Fields to HBase Enrichments
- Verify That the Threat Intel Events Are Enriched
- Prioritizing Threat Intelligence
- Configuring Indexing
- Setting Up a Profile
- Triage Squid Events
- Testing