soc-operations

What problem does it solve?

Security Operations Centers struggle with fragmented workflows, inconsistent triage and handovers, and fragmented reporting that slow investigations and obscure performance metrics.

Core Features & Use Cases

• Alert Triage: Document security alerts with standardized dispositions
• Shift Handovers: Generate structured handover reports for seamless transitions
• Metrics Tracking: Track SOC KPIs including MTTD, MTTR, and false positive rates
• Triage Templates: Pre-built templates for common alert types
• IOC Documentation: Track indicators of compromise during investigations

Quick Start

Run the examples to triage an alert using AlertTriage, generate a shift handover with ShiftHandover, and produce a metrics report with SOCMetrics, following the sample in the documentation.