uruc / SOC-Automation-Lab

This project automates SOC workflows using Wazuh, Shuffle, and TheHive. It involves setting up a Windows 10 client with Sysmon and Ubuntu 22.04 for Wazuh and TheHive, deployed on cloud or VMs. Goals: automate event collection, alerting, and incident response to enhance SOC efficiency.
11Updated 10 months ago

Alternatives and similar repositories for SOC-Automation-Lab:

Users that are interested in SOC-Automation-Lab are comparing it to the libraries listed below