• ASFF ingestion from AWS Security Hub or directly from ASFF output files. (and combined! You can combine findings from scanners not connected with AWS Security Hub, leveraging ASFF format!)
• MetaChecks: More than 50 MetaChecks!
• MetaTags: Using AWS Resource Groups Tagging API, which supports hundreds of resources (get all Tags for almost any affected resource)
• MetaTrails: Querying CloudTrail events for the affected resource! (get who and when created the affected resources)
• Serverless/Lambda ready! MetaHub can run directly on a Lambda function. Just upload the code and run. You can get the output by Invoking the Lambda manually or triggering the Lambda by any service like from AWS Security Hub or EventBridge.
• Back enrichment directly in AWS Security Hub by populating the UserDefinedFields. You can use the information provided by MetaHub to create Insights or Filters instantly in the AWS Security Hub console.
• MetaTags and MetaChecks Filtering
• YAML filters templates to keep your filters versioned
• HTML-enriched dynamic reports: You can generate reports for your security findings by adding MetaTags and MetaChecks. You can then directly filter, sort, and AutoFilter columns in your reports.
• Statistics Module: from any query, get statistics (affected resources by Tagging, by Type, by Check, or by any other field!)
• Four grouping listing modes: full, short, inventory, and statistics
• Three output formats: JSON, CSV, and HTML
• Available Public Docker Image in AWS ECR:. docker run -ti public.ecr.aws/n2p8q5p4/metahub:latest ./metahub -h