Tracecat: Open-source SOAR

Tracecat is an open-source automation platform for security teams. The developers believe security automation should be accessible to everyone, especially understaffed small- to mid-sized teams. Core features, user interfaces, and day-to-day workflows are based on existing best practices from best-in-class security teams. Use specialized AI models to label, summarize, and enrich alerts. Contextualize alerts with internal evidence and external threat intel: Find cases using semantic search MITRE ATT&CK labels Whitelist / blacklist identities Categorize related … More →

The post …

ai models alerts automation best practices class core features cybersecurity developers don't miss evidence features github hot stuff internal open source platform practices security security automation security teams soar software teams workflows