Automation in the SOC with Shuffle
We are using many different products - if there is something happen and we create a Case wie need very fast all the informations. In this sample i will show you, how you can use free Open Source Products to create very fast automatism. In the scenario we get Data in Wazuh, that send this to MISP, MISP see that this is a malicous address and create a information in Wazuh. Wazuh send this via integrations to Shuffle - Shuffle create a Case in The Hive, extract the address and enrich the Case with this address as an observable - the Shuffle starts an analysis of this address and enrich the observable - all this in a few seconds.
All this are free Products, with them you can create your own SOC.