Playbooks

Содержание TOC IR Плейбуки Этот репозиторий содержит все плейбуки и рабочие процессы реагирования на инциденты SOC компании. Каждая папка содержит плейбук, разбитый на 6 разделов в соответствии с NIST - 800.61 r2 1- Подготовка Этот раздел должен содержать следующую информацию Список ВСЕХ активов...

Explainable Artificial Intelligence for Industrial Cybersecurity: A Review of Methods, Operational Integration, and Research Challenges

The increasing digitalization of industrial infrastructure and the convergence of information technology IT and operational technology OT have expanded the cyberattack surface of industrial systems. To address the growing complexity of cyber threats, artificial intelligence AI and machine learnin...

Wazuh and AI For Enhanced SOC Workflows

Artificial Intelligence AI has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making...

Announcing the general availability of Azure Defender for IoT

As businesses increasingly rely on connected devices to optimize their operations, the number of IoT and Operational Technology OT endpoints is growing dramatically—industry analysts have estimated that CISOs will soon be responsible for an attack surface multiple times larger than just a few yea...

VMware Carbon Black Announces Splunk Integration to Streamline and Modernize SOC Workflows

Introducing Unified VMware Carbon Black Cloud App for Splunk At VMware Carbon Black, our ecosystem of integration and alliance partners has been a core part of our vision and strategy. Today, with thousands of customers adopting the VMware Carbon Black Cloud to secure their endpoints and workload...