Created on 04-05-2016 11:04 PM
There are six user personas for Metron:
Persona Name | Description |
SOC Analyst |
|
SOC Investigator |
|
SOC Manager |
|
Forensic Investigator |
|
Security Platform Operations Engineer |
|
Security Data Scientist |
|
The above diagram illustrates the key steps in a typical analyst/investigator workflow. For certain steps in this workflow, Apache Metron provides keys capabilities not found in traditional security tools:
Note that the above 3 steps in the analyst workflow make up approximately 70% of the time. Metron will drastically decrease the analyst workflow time spend because everything the SOC analyst needs to know is in a single place.
The above diagram illustrates the key steps in a typical data science workflow. For certain steps in this workflow, Apache Metron provides key capabilities not found in traditional security tools:
Note that the above 4 steps in the data science workflow make up approximately 80% of the time. Metron will drastically reduce the time from hypothesis to model for the data scientist.
Now that we have understanding of Metron’s user personas, we will now describe the four core functional themes that Metron will focus on. As the community around Metron continues to group, new features and enhancements will be prioritized across these four themes.
The 4 core functional themes are the following:
Over the last 4 months, the community led by Hortonworks, has been hard at work on Apache Metron’s first release (Metron 0.1)
Now that we have described the User Personas and core themes for Metron, the following depicts where the engineering focus has been for Metron 0.1.
As the diagram above illustrates, the key focus areas for Metron 0.1 are the following:
Created on 04-12-2016 05:24 PM
Thanks George, this is a very insightful and deep level of information.