Sooty

概述 Sooty 是一款旨在帮助 SOC 分析师自动化部分工作流程的工具。Sooty 的目标之一是尽可能多地执行常规检查，使分析师在相同时间内有更多时间进行深入分析。以下详细介绍了 Sooty 的许多功能。 Sooty 现已获得 Tines.com 的赞助！Tines 是企业安全团队的 SOAR 平台。 目录 当前功能 要求与安装 开发 更新日志 路线图 贡献者 Sooty 目前能够： 净化 URL，使其可安全用于电子邮件 执行反向 DNS 和 DNS 查询 从以下来源执行信誉检查： VirusTotal BadIP's Abuse IPDB...

soc-automation-lab

Laboratorio de Automatización SOC Este repositorio documenta el diseño, la lógica de detección, los flujos de trabajo de automatización y las lecciones aprendidas al construir una demo de SOC automatizada utilizando herramientas de código abierto. El proyecto se centra en cómo las alertas pasan d...

Agentic AI in SOCs: A Solution to SOAR's Unfulfilled Promises

Security Orchestration, Automation, and Response SOAR was introduced with the promise of revolutionizing Security Operations Centers SOCs through automation, reducing manual workloads and enhancing efficiency. However, despite three generations of technology and 10 years of advancements, SOAR...

How to Use Tines's SOC Automation Capability Matrix

Created by John Tuckner and the team at automation and AI-powered workflow platform Tines, the SOC Automation Capability Matrix SOC ACM is a set of techniques designed to help security operations teams understand their automation capabilities and respond more effectively to incidents. A...

2021 Detection and Response Planning, Part 3: Why 2021 Is the Year for SOC Automation

In this third installment of our series around 2021 security planning, we’re focused on SOC automation. In part one, we spoke with Rapid7 Detection and Response Practice Advisor, Jeffrey Gardner on tips and advice for ramping up annual security planning. In part two, we discussed how reliable,...

Announcing New CB ThreatHunter App for Phantom

Today’s cybersecurity landscape is facing multiple challenges - and not just from cyber attackers. Security teams are understaffed and struggling to find the talent they need to complete their day-to-day tasks, with limited visibility across their security stack. To address these challenges, SOC...

Carbon Black Cybersecurity Experts to Present in 4 Sessions at RSA 2019

We hope you’ll join Carbon Black at one of the company’s four presentations at RSA 2019. And don’t forget the company will also host a book launch and advanced signing of “Gray Day: My Undercover Mission to Expose America’s First Cyber Spy,” with Carbon Black’s National Security Strategist and...