[METRON-1156] Simulate Triage Rules in the Stellar REPL

• Type: New Feature
• Status: Done
• Priority: Major
• Resolution: Done
• Affects Version/s: 0.4.1
• Fix Version/s: 0.4.2
• Assignee: Nick Allen
• Reporter: Nick Allen
• Created: 05/Sep/17 21:40
• Updated: 15/Dec/17 16:58
• Resolved: 15/Dec/17 16:58

Description

Troubleshooting issues when programming against a live stream of data is difficult. It would be useful to have a means to run the entire threat triage process within the REPL before deploying your rule set on a Metron cluster. This creates a set of functions to allow simulation of Threat Triage inside of the Stellar REPL. This is useful for creating new triage rules, debugging existing triage rules, and to iterate quickly when testing rule sets.

Issue Links

• links to: GitHub Pull Request #733