• Kunal Walavalkar
• Yash Jagdale
• Kedar Walavalkar
• Sanchit Gharge
• Amit Nerurkar

The SOC allows organizations to quickly address and mitigate threats, triage the different alerts based on their priority. In essence, the SOC plays an integral part in the Threat Response lifecycle. The SOC is also necessary for risk management, regulatory compliance, and fostering a security-conscious culture inside organisations. This paper covers the architecture and the deployment of an open-source Security Operations Centre (SOC) using Cortex, Shuffle, TheHive, and Wazuh. Wazuh offers real-time log analysis, threat identification, and compliance management functionality to our integrated solution. TheHive allows effective incident management and collaborative response activities through its case management and alert correlation features. By providing automatic reaction actions and threat intelligence enrichment, Cortex enhances the capabilities of the SOC and makes it possible to mitigate security issues quickly and effectively. Shuffle also lends its features to the ecosystem by offering a fully customizable and adaptable workflow that allows the user to automate the processes. All these integrated components empower organizations to defend against emerging threats in a proactive manner, streamline incident response workflows, and continuously enhance their cybersecurity posture in an open-sourced and extensible manner, thereby decreasing the cost to the company.

Security Operations Centre (SOC), Security Incident and Event Management (SIEM), Extended Detection and Response (XDR), Open Source, Case Management, Threat Intelligence

"Security Operation Centre using open-source tools", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.11, Issue 6, page no.K367-K371, June-2024, Available :http://www.jetir.org/papers/JETIR2406A44.pdf

"Security Operation Centre using open-source tools", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.11, Issue 6, page no. ppK367-K371, June-2024, Available at : http://www.jetir.org/papers/JETIR2406A44.pdf