Tag feed

#soar

13 posts4 followers

Explore Hashnode

Alternatives

Trending tags this week

OOmnithiumomnithium.hashnode.devMay 31 · 10 min read

Agentic AI for Cybersecurity: Autonomous Threat Detection and Response

Your SOC ingests 10,000 alerts daily. Analysts triage, correlate, escalate. They close tickets. They maintain playbooks that decay the moment a new TTP surfaces. Mean time to detect (MTTD) stretches i

0

ESEwaldo Simon Hirasaldosimon.comAug 3, 2025 · 7 min read

If I were to start validating my cloud detection...

Prologue I had an interesting 45 minute conversation with a security engineer from a mostly-cloud company. We talked about how would one start a detection assessment program, mainly brainstorming ideas on what to test. It was an impromptu chat (kind ...

0

HUHack Unitedblog.hackunited.orgAug 2, 2025 · 4 min read

From Analyst Intern to Automation Builder: My Journey Beyond the Hype

A few weeks ago, I saw a LinkedIn post that stopped me in my tracks. It asked, "Where did all the cyber analyst jobs go?" and talked about how automation, SOAR, and LLMs are fundamentally changing the landscape. It argued that the work isn't disappea...

0

AGAshish Ghimireashishtalks.hashnode.devMay 15, 2025 · 3 min read

🛡️ SOC Investigation Case Study: Handling "Unfamiliar Sign-In Properties" Alerts

In my role as a Security Operations Center (SOC) analyst, I recently encountered a high-severity alert involving "unfamiliar sign-in properties" for a user account. What initially appeared to be a potential threat turned out to be a false positive, c...

0

AGAshish Ghimireashishtalks.hashnode.devMay 15, 2025 · 2 min read

🎯 From Suspicion to Confirmation: How I Caught a True Positive in a Live SOC Environment

Working as a Student SOC Analyst at LSU Shreveport has given me the chance to experience firsthand how real-world threat detection works — and recently, I encountered my first true positive security incident that tested my analytical and investigativ...

0

LLucasblogs.night-wolf.ioFeb 23, 2025 · 5 min read

Reducing Alert Fatigue: Automating the Triage of Microsoft Defender’s Internal Port Scanning Alerts

Introduction Modern security operations rely on automated alerting to detect reconnaissance activities within enterprise networks. However, when certain alerts trigger frequently, distinguishing between benign system behavior and true security threat...

0

ATAnshul Tiwaricsanshul.hashnode.devSep 3, 2024 · 1 min read

Lets explore SOAR

SOAR stands for Security orchestration automation and response Below is breakup of terms :- Security Orchestration: - Process of integrating various security tools to automate workflows.This enables security team to manage alerts and response from a ...

0

DDarshilciphersec.inAug 28, 2024 · 4 min read

In-Depth Guide to Setting Up and Using Shuffle: A Popular Open Source SOAR Tool

Shuffle is a highly regarded open source Security Orchestration, Automation, and Response (SOAR) tool known for its ease of deployment, robust features, and strong community support. This article will delve into the working of Shuffle, provide a step...

0

JDJonathan DeLeonmrcyberleon.hashnode.devAug 24, 2024 · 4 min read

SOAR + EDR Project using Lima Charlie / Tines

Objective: Utilizing SOAR automation for Endpoint Detection & Response (EDR) to enhance workflow efficiency and automate the isolation of a device across multiple communication channels. Tools Used: In this project, I employed a range of sophisticate...

0

TRTATHAGATA ROYthreatradar.vercel.appAug 21, 2024 · 14 min read

Enhancing Cybersecurity with SOAR-EDR: A Comprehensive Project Using LimaCharlie, Slack, and Tines

Here in this project the enhancement of cybersecurity with a SOAR-EDR project using LimaCharlie, Slack, and Tines will be demonstrated. Introduction to SOAR-EDR Integration Overview of SOAR-EDR and Its Importance Definition of SOAR and EDR: Security...

0

#soar

Search Hashnode

#soar

Explore Hashnode

Trending tags this week

Agentic AI for Cybersecurity: Autonomous Threat Detection and Response

If I were to start validating my cloud detection...

From Analyst Intern to Automation Builder: My Journey Beyond the Hype

🛡️ SOC Investigation Case Study: Handling "Unfamiliar Sign-In Properties" Alerts

🎯 From Suspicion to Confirmation: How I Caught a True Positive in a Live SOC Environment

Reducing Alert Fatigue: Automating the Triage of Microsoft Defender’s Internal Port Scanning Alerts

Lets explore SOAR

In-Depth Guide to Setting Up and Using Shuffle: A Popular Open Source SOAR Tool

SOAR + EDR Project using Lima Charlie / Tines

Enhancing Cybersecurity with SOAR-EDR: A Comprehensive Project Using LimaCharlie, Slack, and Tines