• Sheeba P. S.
• Ketan Patil
• Somdeep Raychaudhuri
• Nikhil Patil
• Samiksha Poojari

This document looks into the development and optimization of a SOAR-based EDR system. The work is based on an open-source SOAR EDR framework that implements LimaCharlie as an EDR, Tines as the automation and playbook execution tool, and Slack/email as alerting channels. Unlike the initial implementation, this one is not limited to Windows OS and it also extends the framework to support Linux (Kali), adding more Detection and Response (D&R) rules to enhance threat detection and mitigation capabilities. An evaluative comparison of the efficacy of threat detection and automated response on Windows and Linux platforms are performed. Results validate the practicality and usefulness of expanding SOAR type security automation to non-homogeneous operating systems, thus contributing to the development of more adaptive cybersecurity approaches.

Cybersecurity, endpoint detection and response, security automation, SOAR, threat detection.

"Automated Threat Detection using SOAR Driven EDR System", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.12, Issue 4, page no.i89-i92, April-2025, Available :http://www.jetir.org/papers/JETIR2504810.pdf

"Automated Threat Detection using SOAR Driven EDR System", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.12, Issue 4, page no. ppi89-i92, April-2025, Available at : http://www.jetir.org/papers/JETIR2504810.pdf