8000
Skip to content
#

ai-soc

Star

Here are 22 public repositories matching this topic...

Language: All
Filter by language
All 22 Python 7 C++ 2 Rust 2 TypeScript 2 Go 1 HTML 1 YARA 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

varpulis / varpulis

Star 6

Rust stream processing engine for real-time detection. Open-source Apache Flink alternative built for detection engineering, fraud prevention, and MITRE ATT&CK coverage. 1.5M events/sec, single 15MB binary, no JVM.

rust cep pattern-matching stream-processing complex-event-processing observability event-processing streaming-engine fraud-detection streaming-analytics mitre-attack threat-detection real-time-detection detection-engineering sigma-rules detection-as-code soc-automation flink-alternative ai-soc siem-alternative
  • Updated Aug 24, 2026
  • Rust

codelassey / tpot-soc-automation

Star 2

Built a Full-Cycle Security Operations Pipeline around a T-Pot honeypot deployment on AWS, with tailscale-enabled local Splunk SIEM log ingestion, AI-powered log analysis and intelligence (Claude + VirusTotal MCPs), incident tracking via DFIR IRIS and Slack, Ollama-based alert triage, and automated response via OPNsense Firewall Rules

splunk honeypot firewall cybersecurity opnsense suricata virustotal firewall-configuration tpot beelzebub elk-stack threat-intelligence blue-team security-monitoring security-operations tailscale ai-soc
  • Updated Jun 16, 2026
  • YARA

Skrotrot / AgenticAnomaly

Star 1

AgenticAnomaly is an indirect prompt injection CTF for testing how agentic security operations center (SOC) workflows can be exploited through indirect prompt injection.

docker security docker-compose cybersecurity ai-agents ai-security cyber-range security-operations security-operations-center prompt-injection llm-agent llm-security openrouter agentic-ai ai-soc agentic-soc agentic-security indirect-prompt-injection prompt-injection-ctf
  • Updated Jun 23, 2026
  • Python

volod-k / agentic-ai-soc-knowledge-base

Star 0

Research for security teams whose alert volume has outrun the SOC and who are deciding how to scale operations: add people, or add AI agents that triage and investigate at machine speed with humans in control.

incident-response cybersecurity soc blueteam soar security-research mdr explainable-ai mitre-attack ai-security threat-detection security-operations alert-triage llm-security ai-soc vendor-comparison agentic-soc autonomous-soc agentic-ai-soc underdefense
  • Updated Jul 10, 2026
auraspear-platform

ihabkhaled / auraspear-platform

Sponsor
Star 0

AuraSpear is an end-to-end AI SOC / SIEM / SOAR / threat-intelligence platform. It brings alerts, cases, incidents, hunts, intel enrichment, detection engineering, connectors, and AI reasoning into one multi-tenant, RBAC-governed workspace — with AI woven through investigation, not bolted on.

security logstash ai nextjs grafana postgresql bedrock gemini openai nest siem soc soar nestjs prisma mssp greylog wazzup aws-bedrock ai-soc
  • Updated Jul 28, 2026
  • TypeScript

api-evangelist / torq

Star 0

Torq is an enterprise-grade AI-driven hyper-automation security platform that enables security operations teams to triage, investigate, and respond to threats at machine speed. The REST API provides programmatic management of workspace resources including workflows, users, secrets, triggers, webhooks, and automated incident response playbooks.

incident-response workflows playbooks security-orchestration no-code security-automation soar security-operations apis-json ai-soc hyper-automation
  • Updated Aug 26, 2026

Improve this page

Add a description, image, and links to the ai-soc topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the ai-soc topic, visit your repo's landing page and select "manage topics."

Learn more

0