SOC-in-a-Box
Stop building your SOC. Import it. Boot it. Use it.
什麼是 SOC-in-a-Box？
SOC-in-a-Box is a fully pre-configured Security Operations Center virtual machine. What's running inside: Wazuh — SIEM and EDR with pre-built detection rules, endpoint monitoring, and real-time alerting DFIR-IRIS — Incident response case management with timeline analysis, IOC tracking, and evidence logging MISP — Threat intelligence platform pre-integrated with Wazuh for automatic IOC enrichment Grafana — Pre-built SOC dashboards visualizing alerts, system health, and trends.
截圖
?
還沒有評論，來搶沙發吧！
X 上關於 SOC-in-a-Box 的真實討論
去 X 發文