• Prathamesh Umesh Jadhav
• Sufiyan Patel

The proliferation of disparate security tools in Security Operations Centers (SOCs) creates operational inefficiencies and detection gaps, particularly for resource-constrained organizations. While our previous work, AutoRecon-SOC, demonstrated automated reconnaissance and alerting, it was limited to Linux platforms and periodic scanning. This paper proposes AutoRecon-SOC 2.0, an enhanced cross-platform framework designed to bridge the critical gap between continuous network monitoring and reactive security operations. Employing a Design Science Research (DSR) methodology, we present a unified architecture that integrates 24/7 real-time monitoring, intelligent threat correlation, and automated incident response through Docker containerization for platform-agnostic deployment. The framework proposes eight integrated modules including real-time monitoring, correlation engine with machine learning capabilities, threat intelligence aggregation, and response automation. Through architectural design and proposed evaluation methodology, this research builds a practical blueprint for enterprise-grade SOC capabilities in an accessible, cost-effective package suitable for small to medium-sized organizations, demonstrating potential for reduced response times and enhanced security posture across heterogeneous IT environments.

"AUTORECON-SOC 2.0: A Cross-Platform Framework for Real-Time SOC Automation", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.13, Issue 2, page no.c86-c91, February-2026, Available :http://www.jetir.org/papers/JETIR2602213.pdf

"AUTORECON-SOC 2.0: A Cross-Platform Framework for Real-Time SOC Automation", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.13, Issue 2, page no. ppc86-c91, February-2026, Available at : http://www.jetir.org/papers/JETIR2602213.pdf