soc-investigation-lab

End-to-End SOC Investigation Lab Executes a complete four-phase attack chain Reconnaissance → Exploitation → Persistence → Exfiltration against Metasploitable2, collects evidence at each phase, and produces a structured incident timeline and SOC report — demonstrating simultaneous attacker and...

COSO Framework for Service Organizations and SOC Reporting (Part 2 of 3)

Every SOC report whether it is a SOC 1, SOC 2 or SOC 3 should include information about the service organizations risk assessment process. Risk assessment can take many forms and there is no "one size fits all" format. Risk assessment is intended to be an evolutionary process, designed to meet th...