Package com.mozilla.secops.postprocessing

Pipeline for further processing of and correlation between alerts

See: Description

Interface Summary

Interface	Description
PostProcessing.PostProcessingOptions	Runtime options for PostProcessing pipeline.

Class Summary

Class	Description
AlertSummary	Summarize alerts and various attributes of alerts over time and generate subsequent alerts if certain thresholds or anomolies are detected.
PostProcessing	PostProcessing implements analysis of alerts generated by other pipelines.
PostProcessing.Parse	Parse incoming events and filter to only include events of type Alert
PostProcessing.WatchlistAnalyze	Check incoming alert events against a watchlist of various identifiers.

Package com.mozilla.secops.postprocessing Description

Pipeline for further processing of and correlation between alerts