Package com.mozilla.secops

General utility classes and transforms for secops-beam

See: Description

Interface Summary

Interface	Description
DocumentingTransform	A transform that will return a documentation string
InputOptions	Standard input options for pipelines.
IOOptions	Interface to allow for passing both input and output options to a class or function.
OutputOptions	Standard output options for pipelines, intended for use with the CompositeOutput transform.

Class Summary

Class	Description
CidrUtil	CIDR matching utilities
CompositeOutput	CompositeOutput provides a standardized composite output transform for use in pipelines.
DetectNat	Provides NAT detection transforms
DetectNat.UserAgentBased	Provides a basic NAT detection transform
FileUtil	Various utilities for file IO
GcsUtil	Utilities for requesting content from Google Cloud Storage
GeoUtil	Geo math utilities
InetRadix	CIDR lookup using radix tree search
IprepdIO	IprepdIO provides an IO transform for writing violation messages to iprepd
IprepdIO.ExemptedObject	ExemptedObject contains the metadata associated with a objects excluded from reporting to iprepd.
IprepdIO.Reader
IprepdIO.ReputationValue	A reputation response from iprepd
IprepdIO.Write	Write violation messages to iprepd based on submitted Alert JSON strings
Minfraud	Query Maxmind minFraud API
MiscUtil	Various miscellaneous utility functions
ScriptRunner	Execute Groovy scripts from within pipeline functions
SourceCorrelation	Source address ingestion and alert correlation
SourceCorrelation.AlertSourceExtractor	Convert Alert to SourceCorrelation.SourceData
SourceCorrelation.EventSourceExtractor	Convert Event to SourceCorrelation.SourceData
SourceCorrelation.SourceCorrelator	Transform for source address alert and ingestion correlation
SourceCorrelation.SourceData	SourceData is an intermediate format used to store information about a given source address observed in the ingestion or alert stream.
SqsIO	SqsIO provides an IO transform for writing messages to SQS
SqsIO.Write
Stats	Generic statistics class
Stats.StatsCombiner	Combine.CombineFn for performing statistics operations on a collection of values
Stats.StatsOutput	Output of statistics transform
StringDistance	Levenshtein string distance calculation
Version
Violation	Represents a violation as would be submitted to iprepd
Watchlist	Watchlist is used by pipelines to query watchlist entries stored within Datastore.
Watchlist.WatchlistEntry

Enum Summary

Enum	Description
SourceCorrelation.SourceData.SourceDataType	Source data types
Violation.ViolationType	Valid violation types

Package com.mozilla.secops Description

General utility classes and transforms for secops-beam