Asset model import connector

摘要

An asset model import connector includes an interface to receive asset data from a data source and a normalize module. The normalize module determines an operation to be performed at a system based on the received asset data and determines code to perform the determined operation. The schema may be populated with attributes from the asset data, and sent to the system.

主权项

1. An asset model import connector comprising a hardware processor to:
receive asset data from a data source, wherein the asset data describes an asset with a network interface; determine an operation to be performed at a security information and event management (SIEM) system different than the data source based on the received asset data and different than the asset model import connector comprising the hardware processor determining the operation, wherein the STEM system stores security event data for a computer network and correlates the security event data with the received asset data; determine asset attributes from a schema to include in code to instruct the STEM system to perform the operation; generate the code by populating the asset attributes in the code with values from the received asset data, the code including the determined operation to be performed at the SIEM system, the code executable at the STEM system to perform the determined operation in relation to the asset data described by the asset attributes; and send the generated code to the STEM system, the SIEM system performing the determined operation on the asset described by the received asset data having the value with which the asset attributes have been populated in the code.