Hey all, We've come across the design decision where we'd like to use Metron tooling as a framework to build our SIEM around. This being the case, stellar is something that we'd like to use, but we've currently got different enrichment and normalization layers.
So my question is this: Has anyone, or could anyone point me to a resource that'd help to normalize our data in such a way that Stellar could be used downstream from our data manipulation/normalization layer? Cheers, Z0r0
