README.md

Security Orchestration, Automation and Response (SOAR)

The World of SOAR in Cybersecurity :

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR). Thanks to all contributors, you're awesome and wouldn't be possible without you! Our goal is to build a categorized community-driven collection of very well-known resources.

What is SOAR?

• SOAR stands for security orchestration, automation, and response.

Why SOAR?

SOAR combines three software capabilities:

• the management of threats and vulnerabilities,
• responding to security incidents,
• and automating security operations.

Table of Contents

• Global-Standards
• Incident-Categories
• Process-Resources
• Playbooks-Resources
• Workflow-Resources
• Automation-Resources
• User-Communities
• Articles
• Presentations
• Training
• SOAR-Solutions
  • Commercial
  • SIEM-with-SOAR-Included
  • Open-Source

Global-Standards

• NIST Cybersecurity Framework
• NIST Computer Security Incident Handling Guide
• Collaborative Open Playbook Standard (COPS) - by Demisto
• RE&CT Framework - a MITRE ATT&CK inspired framework specifically for actionable Incident Response techniques.
• Integrated Adaptive Cyber Defense (IACD) Automate Framework
• OASIS Collaborative Automated Course of Action Operations (CACAO) for Cyber Security - a standards effort to define a common language for course of action playbooks

Incident-Categories

• ServiceNow Incident Categories and Subcategories
• Incident Classification/Incident Taxonomy according to eCSIRT.net

Process-Resources

• Information Security Incident Management Process Document Template
• Incident Response Flowchart
• Critical Infrastructure Cyber Incident Management Process
• SANS Incident Handler's Handbook

Playbooks-Resources

• Playbooks in Visio and PDF
• Top 5 Playbooks by Ayehu
• Playbooks by Societe Generale
• Playbooks by guardsight
• Playbooks (cloud) by AWS

Automation-Resources

• Playbooks Automation components by Phantom
• Playbooks Automation components part 2 by Phantom
• Playbooks Automation components by DTonomy
• Playbooks Automation components by ThreatConnect
• Playbooks Automation components part 2 by ThreatConnect
• Playbooks Automation components by Rapid7
• Playbooks Automation components by Microsoft Azure Sentinel
• Playbooks Automation components by Ayehu
• Playbooks Automation components part 2 by Ayehu
• Playbooks Automation components part 3 by Ayehu
• Playbooks Automation components by ThreatConnect
• Playbooks Automation components by Shuffle
• Playbooks Automation components part 2 by Shuffle
• Playbooks Automation components by IBM Resilient Community
• Playbooks Automation components by Rapid7
• Playbooks Automation components by TheHive Cortex
• Playbooks Automation components part 2 by TheHive Cortex
• Playbooks Automation components by WALKOFF
• Playbooks Automation components by LogRhythm

User-Communities

• SOAR Telegram Group

Market-Research

• State of SOAR Report 2019
• Gartner Market Guide for SOAR Solutions 2019
• DFLABS Enterprise SOAR Buyers Guide 2019
• Top 10 SOAR Solutions for 2019
• Top Reviewed SOAR's on G2
• SOAR Vendor comparison
• The 8 Best SOAR Security Companies for 2020
• SANS 2020 Automation and Integration Survey Results
• PeerTalk™ Panel: SOAR Trends in 2020 and Beyond

Articles

• An OODA-driven SOC Strategy using: SIEM, SOAR and EDR
• Why a mature SIEM environment is critical for SOAR implementation
• 7 Steps to Building an Incident Response Playbook
• 8 Ways Playbooks Enhance Incident Response
• Top Security Orchestration Use Cases
• Security orchestration and automation checklist

Presentations

• Hacking your SOEL: SOC Automation and Orchestration – SANS Security Operations Summit 2018
• Hacking your SOEL: SOC Automation and Orchestration – SANS Security Operations Summit 2018 - SLIDES
• Leveraging TheHive & Cortex for automated IR
• Cloud Security Automation: From Infrastructure to App | SANS Cloud Security Summit 2019
• SANS Webcast: Automating Information Security with Python

Training

• SANS SEC573: Automating Information Security with Python

Contribute

Contributions welcome! Read the contribution guidelines first.

SOAR-Solutions

• Commercial
• SIEM-with-SOAR-Included
• Open-Source

Commercial

• Cortex XSOAR - Previously Demisto, now with Palo Alto Networks
  • [PRODUCT BLOG LINKS]
    • Demisto Blog
    • Palo Alto Blog
  • [WEBINAR LINKS]
    • Cortex XSOAR Webinar Videos on Youtube
    • Demisto Webinar Videos on Youtube
  • [CONFERENCE SLIDES LINKS]
    • Palo Alto Networks Ignite Conference Videos Youtube
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Cortex XSOAR 30 Day Free Community Edition
  • [FREE LEARNING LINKS]
    • Several Free Foundational eLearning Courses
    • Customer Case Studies
    • Demisto, Cortex XSOAR Youtube video playlist
  • [PAID TRAINING LINKS]
    • Palo Alto Learning Center
  • [DOCUMENTATION LINKS]
    • Cortex XSOAR Documentation
  • [SUPPORT LINKS]
    • Not Available
  • [USER FORUM LINKS]
    • Cortex XSOAR User Community
  • [APP DEVELOPMENT LINKS]
    • Content Developer Portal
    • XSOAR Github
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Not Available - Feature requests go through support
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • XSOAR Youtube Channel
  • [TWITTER LINKS]
    • PAN Twitter Page
  • [LINKEDIN LINKS]
    • LinkedIN
  • [ONLINE CHAT GROUPS]
    • Online Slack Community
• DTonomy SOAR
  • [PRODUCT BLOG LINKS]
    • DTonomy Blog
  • [WEBINAR LINKS]
    • Not Available
  • [CONFERENCE SLIDES LINKS]
    • Not Available
  • [FREE/TRIAL DOWNLOAD LINKS]
    • DTonomy Community
  • [FREE LEARNING LINKS]
    • DTonomy Quick Tutorial
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • DTonomy Doc
  • [SUPPORT LINKS]
    • Not Available
  • [USER FORUM LINKS]
    • Not Available
  • [APP DEVELOPMENT LINKS]
    • Not Available
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Request Enhancement Link
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • DTonomy Youtube
  • [TWITTER LINKS]
    • DTonomy Twitter
  • [LINKEDIN LINKS]
    • DTonomy LinkedIN
  • [ONLINE CHAT GROUPS]
    • DTonomy Slack
• IBM Resilient
  • [PRODUCT BLOG LINKS]
    • IBM Security Resilient Community Blog
  • [WEBINAR LINKS]
    • IBM Resilient On-Demand Webinars
    • IBM Resilient Webinar videos on Youtube
  • [CONFERENCE SLIDES LINKS]
    • Not Available
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available - Image can be downloaded here, but requires license
  • [FREE LEARNING LINKS]
    • IBM Learning Academy - Couple of Free Courses
    • IBM Resilient Youtube Videos
  • [PAID TRAINING LINKS]
    • IBM Learning Academy
  • [DOCUMENTATION LINKS]
    • IBM Resilient Documentation
  • [SUPPORT LINKS]
    • IBM Security Resilient Support
  • [USER FORUM LINKS]
    • IBM Security Resilient Community Forum
  • [APP DEVELOPMENT LINKS]
    • IBM Resilient Community Apps
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • IBM Security Resilient Ideas (RFE's)
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • IBM Security Youtube Videos
    • Older IBM Resilient Youtube Videos
  • [TWITTER LINKS]
    • IBM Security
  • [LINKEDIN LINKS]
    • IBM Resilient LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• Splunk Phantom
  • [PRODUCT BLOG LINKS]
    • Phantom Blog
  • [WEBINAR LINKS]
    • on demand webinars
    • Phantom Youtube Webinars
  • [CONFERENCE SLIDES LINKS]
    • Splunk .Conf slides
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Free Community edition available for registered users
  • [FREE LEARNING LINKS]
    • Phantom Community Youtube Video
  • [PAID TRAINING LINKS]
    • Paid Instructor led training
  • [DOCUMENTATION LINKS]
    • Phantom Documentation
  • [SUPPORT LINKS]
    • Splunk Support page
  • [USER FORUM LINKS]
    • Phantom User Community
  • [APP DEVELOPMENT LINKS]
    • Phantom Github Repository
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Post Feature request in title on user forum
  • [REDDIT COMMUNITY LINKS]
    • Phantom Team Questions Thread
  • [YOUTUBE LINKS]
    • Splunk Official Youtube
  • [TWITTER LINKS]
    • Phantom on Twitter
  • [LINKEDIN LINKS]
    • Phantom on LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• Siemplify
  • [PRODUCT BLOG LINKS]
    • Siemplify Blog
  • [WEBINAR LINKS]
    • Siemplify Webinars
  • [CONFERENCE SLIDES LINKS]
    • Not Available
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Siemplify Community Edition
    • Siemplify Trial Edition
  • [FREE LEARNING LINKS]
    • Siemplify Video Tour
    • Siemplify Resources
    • Siemplify Youtube
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • User Forum
  • [SUPPORT LINKS]
    • Siemplify Support
  • [USER FORUM LINKS]
    • User Forum
  • [APP DEVELOPMENT LINKS]
    • User Forum
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • User Forum
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • Siemplify Youtube
  • [TWITTER LINKS]
    • Siemplify Twitter
  • [LINKEDIN LINKS]
    • Siemplify LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• Swimlane - Syncurity is now acquired by Swimlane
  • [PRODUCT BLOG LINKS]
    • Swimlane Blog
  • [WEBINAR LINKS]
    • Swimlane Webinars
  • [CONFERENCE SLIDES LINKS]
    • Swimlane Conference
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available
  • [FREE LEARNING LINKS]
    • SOAR Learning Hubg
  • [PAID TRAINING LINKS]
    • Swimlane Paid Training
  • [DOCUMENTATION LINKS]
    • Swimlane Documentation
  • [SUPPORT LINKS]
    • Swimlane Support Portal
  • [USER FORUM LINKS]
    • SecOps Hub User forum
  • [APP DEVELOPMENT LINKS]
    • App Developer Resources
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Swimlane Support Portal for feature requests
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • Swimlane Youtube
  • [TWITTER LINKS]
    • Swimlane Twitter
  • [LINKEDIN LINKS]
    • Swimlane LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• Rapid7 InsightConnect
  • [PRODUCT BLOG LINKS]
    • Rapid7 Blog
  • [WEBINAR LINKS]
    • Rapid7 Webinars
  • [CONFERENCE SLIDES LINKS]
    • Rapid7 Conference
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Free Trial
  • [FREE LEARNING LINKS]
    • Free Learning Resources
    • Online videos Youtube
  • [PAID TRAINING LINKS]
    • Training and Certification
  • [DOCUMENTATION LINKS]
    • Rapid7 InsightConnect Documentation
  • [SUPPORT LINKS]
    • Support Login
  • [USER FORUM LINKS]
    • Rapid7 Login
  • [APP DEVELOPMENT LINKS]
    • Rapid7 InsightConnect Developer instructions
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Rapid7 InsightConnect feature requests on github
  • [REDDIT COMMUNITY LINKS]
    • Unofficial Rapid7 Reddit
  • [YOUTUBE LINKS]
    • Rapid7 youtube
  • [TWITTER LINKS]
    • Rapid7 Twitter
  • [LINKEDIN LINKS]
    • Rapid7 LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• ThreatConnect
  • [PRODUCT BLOG LINKS]
    • ThreatConnect Blog
  • [WEBINAR LINKS]
    • ThreatConnect Webinars
  • [CONFERENCE SLIDES LINKS]
    • ThreatConnect Events
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available
  • [FREE LEARNING LINKS]
    • ThreaConnect Learning Portal
    • ThreatConnect Resources
  • [PAID TRAINING LINKS]
    • ThreaConnect Learning Portal
  • [DOCUMENTATION LINKS]
    • ThreatConnect Documentation
  • [SUPPORT LINKS]
    • ThreatConnect Support
  • [USER FORUM LINKS]
    • ThreatConnect Community
  • [APP DEVELOPMENT LINKS]
    • ThreatConnect Apps
    • ThreatConnect Developer Github
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • ThreatConnect Support
  • [REDDIT COMMUNITY LINKS]
    • ThreatConnect Reddit
  • [YOUTUBE LINKS]
    • ThreatConnect Youtube
  • [TWITTER LINKS]
    • ThreatConnect Twitter
  • [LINKEDIN LINKS]
    • ThreatConnect LinkedIN
  • [ONLINE CHAT GROUPS]
    • ThreatConnect Slack Channel
• ATAR - Now part of Micro Focus (ArcSight)
  • [PRODUCT BLOG LINKS]
    • Atar Blog
  • [WEBINAR LINKS]
    • Atar Resources
  • [CONFERENCE SLIDES LINKS]
    • Atar Youtube videos
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available
  • [FREE LEARNING LINKS]
    • Atar Videos
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • Not Available
  • [SUPPORT LINKS]
    • Not Available
  • [USER FORUM LINKS]
    • Not Available
  • [APP DEVELOPMENT LINKS]
    • Not Available
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Not Available
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • Atar Youtube
  • [TWITTER LINKS]
    • Atar Twitter
  • [LINKEDIN LINKS]
    • Atar LinkedIN
  • [ONLINE CHAT GROUPS]
    • .Not Available
• Ayehu
  • [PRODUCT BLOG LINKS]
    • Ayehu Blog
  • [WEBINAR LINKS]
    • Ayehu Webinars
  • [CONFERENCE SLIDES LINKS]
    • Ayehu Conference resources
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Ayehu 30 day free trial
  • [FREE LEARNING LINKS]
    • Ayehu Resource Center
    • Ayehu Free Training Courses
  • [PAID TRAINING LINKS]
    • Ayehu paid Training Courses
  • [DOCUMENTATION LINKS]
    • Ayehu Documentation
  • [SUPPORT LINKS]
    • Ayehu Support Portal
  • [USER FORUM LINKS]
    • Ayehu User Community
  • [APP DEVELOPMENT LINKS]
    • Ayehu App development
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Ayehu Support Portal
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • Ayehu Youtube
  • [TWITTER LINKS]
    • Ayehu Twitter
  • [LINKEDIN LINKS]
    • Ayehu LinkedIN Group
  • [ONLINE CHAT GROUPS]
    • Not Available
• FortiSOAR - Previously called CyberSponse, Now part of Fortinet
  • [PRODUCT BLOG LINKS]
    • FortiSOAR Blog
  • [WEBINAR LINKS]
    • Fortinet Webinar events
  • [CONFERENCE SLIDES LINKS]
    • Fortinet Conference events
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Free 45 day Community Edition
  • [FREE LEARNING LINKS]
    • FortiSOAR Resources
    • FortiSOAR Youtube Videos
  • [PAID TRAINING LINKS]
    • FortiSOAR training
  • [DOCUMENTATION LINKS]
    • FortiSOAR Documentation
  • [SUPPORT LINKS]
    • FortiSOAR SUpport
  • [USER FORUM LINKS]
    • FortiSOAR Community
  • [APP DEVELOPMENT LINKS]
    • Not Available
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • FortiSOAR SUpport
  • [REDDIT COMMUNITY LINKS]
    • Fortinet Reddit
  • [YOUTUBE LINKS]
    • FortiSOAR Youtube
  • [TWITTER LINKS]
    • FortiSOAR Twitter
  • [LINKEDIN LINKS]
    • FortiSOAR LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• D3 SOAR
  • [PRODUCT BLOG LINKS]
    • D3 SOAR Blog
  • [WEBINAR LINKS]
    • D3 Security
  • [CONFERENCE SLIDES LINKS]
    • D3 SOAR Conference resources
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available
  • [FREE LEARNING LINKS]
    • D3 SOAR resources
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • Not Available
  • [SUPPORT LINKS]
    • Not Available
  • [USER FORUM LINKS]
    • Not Available
  • [APP DEVELOPMENT LINKS]
    • Not Available
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Not Available
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • D3 Security Youtube
  • [TWITTER LINKS]
    • D3 Security Twitter
  • [LINKEDIN LINKS]
    • D3 Security LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• DFLabs IncMan SOAR
  • [PRODUCT BLOG LINKS]
    • DFLabs Blog
  • [WEBINAR LINKS]
    • DFLabs Webinars
  • [CONFERENCE SLIDES LINKS]
    • DFLabs Conference
  • [FREE/TRIAL DOWNLOAD LINKS]
    • DFLabs IncMan SOAR Community Edition
  • [FREE LEARNING LINKS]
    • Not Available
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • DFLabs Community portal
  • [SUPPORT LINKS]
    • DFLabs Support portal
  • [USER FORUM LINKS]
    • DFLabs Community portal
  • [APP DEVELOPMENT LINKS]
    • Not Available
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • DFLabs Community portal
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • DFLabs Youtube
  • [TWITTER LINKS]
    • DFLabs Twitter
  • [LINKEDIN LINKS]
    • DFLabs LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not available
• Resolve SOAR
  • [PRODUCT BLOG LINKS]
    • Resolve SOAR Blog
  • [WEBINAR LINKS]
    • Resolve SOAR Webinars
  • [CONFERENCE SLIDES LINKS]
    • Resolve SOAR Webinars
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not available
  • [FREE LEARNING LINKS]
    • Resolve SOAR Vimeo Videos
  • [PAID TRAINING LINKS]
    • Resolve Training
  • [DOCUMENTATION LINKS]
    • Not available
  • [SUPPORT LINKS]
    • Resolve SOAR Support portal
  • [USER FORUM LINKS]
    • Not available
  • [APP DEVELOPMENT LINKS]
    • Not available
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Resolve SOAR Support portal
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • Resolve SOAR Vimeo
  • [TWITTER LINKS]
    • Resolve SOAR Twitter
  • [LINKEDIN LINKS]
    • Resolve SOAR LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• ServiceNow SecOps
  • [PRODUCT BLOG LINKS]
    • ServiceNow Blog
  • [WEBINAR LINKS]
    • ServiceNow Secops Webinars
  • [CONFERENCE SLIDES LINKS]
    • ServiceNow Knowledge
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available
  • [FREE LEARNING LINKS]
    • Not Available
  • [PAID TRAINING LINKS]
    • ServiceNow SecOps Paid Training
  • [DOCUMENTATION LINKS]
    • ServiceNow SecOps Documentation
  • [SUPPORT LINKS]
    • ServiceNow Support
  • [USER FORUM LINKS]
    • ServiceNow Secops User Forum
  • [APP DEVELOPMENT LINKS]
    • ServiceNow Secops integration
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • ServiceNow Support
  • [REDDIT COMMUNITY LINKS]
    • ServiceNow Reddit Community
  • [YOUTUBE LINKS]
    • ServiceNow Youtube
  • [TWITTER LINKS]
    • ServiceNow Twitter
  • [LINKEDIN LINKS]
    • ServiceNow LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• SIRP SOAR
  • [PRODUCT BLOG LINKS]
    • SIRP Blog
  • [WEBINAR LINKS]
    • SIRP Webinars
  • [CONFERENCE SLIDES LINKS]
    • SIRP Webinars
  • [FREE/TRIAL DOWNLOAD LINKS]
    • .Not Available..
  • [FREE LEARNING LINKS]
    • Not Available
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • Not Available
  • [SUPPORT LINKS]
    • Not Available
  • [USER FORUM LINKS]
    • Not Available
  • [APP DEVELOPMENT LINKS]
    • Not Available
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Not Available
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • SIRP Youtube
  • [TWITTER LINKS]
    • SIRP Twitter
  • [LINKEDIN LINKS]
    • SIRP LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available

SIEM-with-SOAR-Included

• Microsoft Azure Sentinel - Logic Apps used as SOAR Functionality
  • [PRODUCT BLOG LINKS]
    • Product Blog
  • [WEBINAR LINKS]
    • Security Webinars List
  • [CONFERENCE SLIDES LINKS]
    • Ignite 2019 Recap
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Free Trial on Azure Cloud
  • [FREE LEARNING LINKS]
    • Azure Sentinel Ninja
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • Azure Documentation
  • [SUPPORT LINKS]
    • Azure Support
  • [USER FORUM LINKS]
    • Azure Sentinel User forum
  • [APP DEVELOPMENT LINKS]
    • Github Repository
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Azure Sentinel Product Feedback
  • [REDDIT COMMUNITY LINKS]
    • Azure Sentinel Reddit
  • [YOUTUBE LINKS]
    • Azure Sentinel Youtube
  • [TWITTER LINKS]
    • Azure Sentinel Twitter
  • [LINKEDIN LINKS]
    • Azure Sentinel LinkedIN
  • [ONLINE CHAT GROUPS]
    • Azure Sentinel Telegram group
    • Azure Sentinel Telegram Feed group
• Securonix SOAR
  • [PRODUCT BLOG LINKS]
    • Securonix Blog
  • [WEBINAR LINKS]
    • Securonix Webinars
  • [CONFERENCE SLIDES LINKS]
    • Securonix Conference Videos on Youtube
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available
  • [FREE LEARNING LINKS]
    • Not Available
  • [PAID TRAINING LINKS]
    • Securonix Paid Training
  • [DOCUMENTATION LINKS]
    • Securonix Documentation
  • [SUPPORT LINKS]
    • Securonix Support
  • [USER FORUM LINKS]
    • Securonix User Forum
  • [APP DEVELOPMENT LINKS]
    • Securonix SOAR App Development
    • Securonix Apps on Github
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Securonix Feature Requests
  • [REDDIT COMMUNITY LINKS]
    • Securonix on Reddit
  • [YOUTUBE LINKS]
    • Securonix on Youtube
  • [TWITTER LINKS]
    • Securonix on Twitter
  • [LINKEDIN LINKS]
    • Securonix LinkedIN
  • [ONLINE CHAT GROUPS]
    • Not Available
• LogRhythm SOAR
  • [PRODUCT BLOG LINKS]
    • LogRhythm Blog
  • [WEBINAR LINKS]
    • LogRhythm Webinars
  • [CONFERENCE SLIDES LINKS]
    • LogRhythm Conference Videos on Youtube
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Available Only For Network Monitors
  • [FREE LEARNING LINKS]
    • Free Training Videos
  • [PAID TRAINING LINKS]
    • LogRhythm Paid Training
  • [DOCUMENTATION LINKS]
    • LogRhythm Documentation
  • [SUPPORT LINKS]
    • LogRhythm Support
  • [USER FORUM LINKS]
    • LogRhythm User Forum
  • [APP DEVELOPMENT LINKS]
    • LogRhythm Apps on Github
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • LogRhythm Feature Requests
  • [REDDIT COMMUNITY LINKS]
    • LogRhythm on Reddit
  • [YOUTUBE LINKS]
    • LogRhythm on Youtube
  • [TWITTER LINKS]
    • LogRhythm on Twitter
  • [LINKEDIN LINKS]
    • LogRhythm LinkedIN
  • [ONLINE CHAT GROUPS]
    • LogRhythm Telegram group
• RSA NetWitness Orchestrator - Based off Demisto or ThreatConnect
  • [PRODUCT BLOG LINKS]
    • RSA NetWitness Orchestrator Blog
  • [WEBINAR LINKS]
    • RSA NetWitness Orchestrator Webinars
  • [CONFERENCE SLIDES LINKS]
    • RSA Conference presentations
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Not Available
  • [FREE LEARNING LINKS]
    • RSA Netwitness Orchestrator Training
  • [PAID TRAINING LINKS]
    • RSA Netwitness Orchestrator Training
  • [DOCUMENTATION LINKS]
    • RSA NetWitness Orchestrator Documentation
  • [SUPPORT LINKS]
    • RSA Support
  • [USER FORUM LINKS]
    • RSA Support
  • [APP DEVELOPMENT LINKS]
    • Not Available - See ThreatConnect and Demisto for development
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • RSA Support
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • RSA Youtube
  • [TWITTER LINKS]
    • RSA Twitter
  • [LINKEDIN LINKS]
    • RSA Linkedin
  • [ONLINE CHAT GROUPS]
    • Not Available

Open-Source

• TheHive
  • [PRODUCT BLOG LINKS]
    • TheHive Product Blog
  • [WEBINAR LINKS]
    • TheHive Youtube Videos
  • [CONFERENCE SLIDES LINKS]
    • TheHive Conference Youtube Videos
  • [FREE/TRIAL DOWNLOAD LINKS]
    • TheHive is Open Source Software and completely free to download
  • [FREE LEARNING LINKS]
    • Free Training Material
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • TheHive Documentation
  • [SUPPORT LINKS]
    • Log issue at Github
  • [USER FORUM LINKS]
    • Google Groups for User
  • [APP DEVELOPMENT LINKS]
    • How to write analyzers
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Create feature requests are made on github issues
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • Not Available
  • [TWITTER LINKS]
    • TheHive Twitter Account
  • [LINKEDIN LINKS]
    • Not Available
  • [ONLINE CHAT GROUPS]
    • TheHive Gitter
• Shuffle
  • [PRODUCT BLOG LINKS]
    • Creator Medium Blog
  • [WEBINAR LINKS]
    • Not Available
  • [CONFERENCE SLIDES LINKS]
    • Not Available
  • [FREE/TRIAL DOWNLOAD LINKS]
    • Open Source on-prem edition
    • Free On-Cloud version
  • [FREE LEARNING LINKS]
    • Introduction blog
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • Shuffle Documentation
  • [SUPPORT LINKS]
    • Contact information
  • [USER FORUM LINKS]
    • Not Available
  • [APP DEVELOPMENT LINKS]
    • Create App from Scratch
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Create issue on github
  • [REDDIT COMMUNITY LINKS]
    • Shuffle Introduction
  • [YOUTUBE LINKS]
    • Not Available
  • [TWITTER LINKS]
    • Shuffle Creator Twitter
  • [LINKEDIN LINKS]
    • Not Available
  • [ONLINE CHAT GROUPS]
    • Online Gitter Chat
• WALKOFF
  • [PRODUCT BLOG LINKS]
    • Not Available
  • [WEBINAR LINKS]
    • Not Available
  • [CONFERENCE SLIDES LINKS]
    • WALKOFF CONFERENCE SLIDES
  • [FREE/TRIAL DOWNLOAD LINKS]
    • WALKOFF Open Source Github Repository
  • [FREE LEARNING LINKS]
    • WALKOFF Toturials
  • [PAID TRAINING LINKS]
    • Not Available
  • [DOCUMENTATION LINKS]
    • WALKOFF DOCUMENTATION
    • WALKOFF DOCUMENTATION on Github
  • [SUPPORT LINKS]
    • E-Mail WALKFOFF Support
  • [USER FORUM LINKS]
    • Not Available
  • [APP DEVELOPMENT LINKS]
    • APP DEVELOPMENT INSTRUCTIONS
  • [REQUEST FOR ENHANCEMENTS LINKS]
    • Create issue on Github
  • [REDDIT COMMUNITY LINKS]
    • Not Available
  • [YOUTUBE LINKS]
    • Not Available
  • [TWITTER LINKS]
    • Not Available
  • [LINKEDIN LINKS]
    • Not Available
  • [ONLINE CHAT GROUPS]
    • Not Available

License

MIT License & cc license

This work is licensed under a Creative Commons Attribution 4.0 International License.

To the extent possible under law, Paul Veillard has waived all copyright and related or neighboring rights to this work.