SOC.OS

SOC.OS is an alert correlation and triage automation tool. SOC.OS is a spin-out of BAE Systems Applied Intelligence. SOC.OS enriches, correlates, and prioritizes your alerts, boosting productivity, enhancing threat visibility and shortening mean time to respond to cyber incidents.
“Having a product like SOC.OS that analyses and correlates events cluster them with threat scores, timelines, and detailed threat explanations helps to reduce the resource we have to expend to monitor our security logs.”
“The point of SOC.OS is not to act as a detector or a trigger, it exists to filter out the noise. It’s easy to set up; just throw your security logs at it and it will show you where to spend your time looking. It looks across time and space and points out the things that need attention, thus the few staff you do have on-site don’t waste time chasing down false positives.”
SOC.OS collects and analyses every alert generated by your security tools 24 hours a day, 365 days a year. Using external threat intelligence, business context, and the MITRE ATT&CK framework, SOC.OS correlates and groups alert into related incidents, escalating only the most important ones to the infosec team for further review.