Sqrrl

Sqrrl is a graph database management system (DBMS) . It uses secure, adatable NoSQL built from Apache Accumulo. Originally founded by former employees of the National Security Agency (NSA), Sqrrl focuses on cybersecurity.

A Sqrrl whitepaper describes Sqrrl Enterprise as a threat hunting tool that uses large amounts of data with linked data analysis to aid users going through the 'hunting loop'. In particular, Sqrrl manages data and can display it to users raw or in the form of visualizations for analytics, finding threat patterns, or for further investigation.

History

Sqrrl development began in 2011. As a company, it was founded by Ely Kahn and Oren J. Falkowitz who worked in cybersecurity before creating Sqrrl. Sqrrl was built on Apache Accumulo. Customers using Sqrrl came from both the private and public sector.

In January of 2018, Sqrrl was acquired by Amazon Web Services (AWS). Existing users of Sqrrl were able to continue using the software without any changes. In late November 2018, Sqrrl co-founder Ely Kahn (who is now a Security Strategist at AWS) commented on the release of AWS Security Hub, which includes visualizations and security remediation recommendations. However, there were no statements made explicitly about Sqrrl's integration with AWS.

Data Model

Key/Value Graph

After data is ingested, the Sqrrl Enterprise product details each piece at a cell level. Data can be a key/value pair or a field in a JSON document. Sqrrl then uses secondary indexing techniques to store the data in Apache Accumulo.

Query Interface

Custom API

Sqrrl Enterprise offers users a proprietary query language called SqrrlQL that is integrated with the cell-level security concept. Users are able to execute SQL-like queries (key-value), full-text queries, or graph searches.

Sqrrl Logo
Website

http://sqrrl.com/

Developer

Sqrrl Data, Inc.

Country of Origin

US

Start Year

2012

Acquired By

Amazon

Project Type

Commercial

Written in

Java

Supported languages

ActionScript, C, C#, C++, Cocoa, Delphi, Erlang, Go, Haskell, Java, JavaScript, Ocaml, Perl, PHP, Python, Ruby, Smalltalk

Derived From

Accumulo

Operating Systems

Linux

Wikipedia

https://en.wikipedia.org/wiki/Sqrrl