InLevel Up Codingbyh@shtalk·3d agoThree years inside a SOAR platform: what security automation actually looks likelessons from a SOAR engineers’ desk
Saif Khan·Oct 13Ingesting On-Premises Windows and Linux Logs into Microsoft Sentinel: The Enterprise Architect’s…A complete blueprint for deploying Azure Arc, Azure Monitor Agent (AMA), DCR transformations, and hardened Syslog/CEF forwarders in hybrid…
Ravishkarathnayaka·Oct 12Building an Automated SOAR Incident Response & Threat Intelligence Pipeline in Python: From SIEM…How I engineered an enterprise-grade SecOps SOAR pipeline using multi-feed threat intelligence fusion, policy-driven decision gates, and…
Umid Guluzada·Oct 8SIEM and SOAR: Two key pillars of Security Operations Centers (SOCs)In today’s digital world, the number, speed, and complexity of cyberattacks are increasing exponentially. Enterprise security teams (SOCs —…
Khaled Abdalnasser·Oct 6Beating Alert Fatigue: Tuning and Automation in the SOCHow a Senior SOC Analyst keeps signal high and burnout low
Relayshieldadmin·Sep 30RelayShield’s Agentic Attack Surface Intelligence Now Ships as a Cortex XSOAR Content Pack |…An agent that reads a repository’s setup instructions, connects to an MCP server, or follows a tool’s README is extending trust to whatever…
Joseph George·Sep 29Automating SOC Alert Triage: A Step-by-Step Guide to Building a SOAR Lab with n8n and PythonSecurity Operations Centers (SOCs) run on data, but they frequently choke on it. When Tier 1 analysts spend the majority of their shifts…
wh0arey0u·Sep 18由Azure Sentinel＋Logic App＋AI砌一套自動化 SOC Playbook — 第一篇：架構設計如果你做過 SOC，你一定明呢種節奏。一個 alert 彈出嚟，打開個 incident，碌下啲 entity，copy 幾個 field，paste 去第二個 tool，可能再 send 封 email 俾個 user，然後返去 close 返張…
Anudevv·Sep 13How I Built a Fully Automated SOC on AWS That Caught Real Attacks — Using Only Open-Source Tools…TL;DR → Built a full SOC on AWS using Wazuh, Suricata, Shuffle SOAR, TheHive, and Groq AI → Detects threats in < 5 seconds, notifies in <…
