cyb3rxp/awesome-soc resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1805 stars · 286 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated awesome-list knowledge base and operational handbook for building, running, and maturing a Security Operations Center (SOC) and CSIRT. It aggregates must-read papers, tools, playbooks, metrics, and best practices across detection engineering, threat intelligence, and SOC automation.

Use cases

• build a security operations center from scratch
• learn detection engineering best practices
• find SOC playbooks and SOPs
• mature an existing SOC with metrics and KPIs
• learn threat intelligence and threat hunting
• find resources for incident response team setup
• explore AI use cases in security operations

When to choose

• you are standing up or maturing a SOC/CSIRT and need curated guidance
• you want a single reference of vetted papers, tools, and playbooks for security operations
• you are a SOC analyst or manager looking for training and process resources

When to avoid

• you need runnable software rather than a curated list of links
• you want hands-on labs or tutorials rather than reference material
• you need vendor-specific product documentation

Facets

learning-resource · maturity active

documentation security monitoring security developer-tools awesome-lists awesome-list soc csirt incident-response detection-engineering threat-intelligence siem soar dfir threat-hunting mitre-attack security-operations web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cyb3rxp/awesome-soc")