TI automation - Foundation: custom prototype and SOC integration [part 2]

soc_enav — Thu, 31 Aug 2017 12:55:36 GMT

Hi again,

after good feedback received on the first post on MineMeld architecture and hardening I wrote a new post on how I built the foundation of near-real-time integration of MineMeld with our Information Security Operation Center (i-SOC) custom SPLUNK application.

You can read the new post here

Feedback welcome, tks

Giovanni

topic TI automation - Foundation: custom prototype and SOC integration [part 2] in General Topics

TI automation - Foundation: custom prototype and SOC integration [part 2]