Soc

SCOT is a cybersecurity incident tracking and management platform that enables security operations centers to document, analyze, and coordinate responses to security events through collaborative workflows.

SOAR platform for orchestrating security products and automating SOC workflows

OSTrICa is an open source plugin-based framework that collects and visualizes threat intelligence data from various sources to help cybersecurity professionals correlate IoCs and enhance their defensive capabilities.

Web-based tool for incident response with easy local installation using Docker.

BlueTeam.Lab provides Terraform and Ansible scripts to deploy an orchestrated detection laboratory for testing attacks and forensic artifacts in a SOC-like Windows environment.

AI-driven XDR platform for endpoint security with threat prevention and detection

FIR is a Python-based cybersecurity incident management platform designed for CSIRTs, CERTs, and SOCs to create, track, and report security incidents.

Automated DFIR platform for rapid incident investigation and endpoint triage

Open-source observable analysis engine and companion tool for TheHive platform