{"adoption": {"forks": 286, "observed_at": "2026-08-28T04:05:38.947298+00:00", "stars": 1805}, "canonical_url": "https://ross.abutalabs.com/products/awesome-soc", "card": {"archived": false, "artifact_type": "learning-resource", "description": "A curated knowledge base to build, run and mature a SOC (including CSIRT).", "domain": ["security", "developer-tools", "awesome-lists"], "enriched": true, "function": ["documentation", "security", "monitoring"], "health_score": 80, "homepage": null, "language": null, "license": "CC0-1.0", "license_family": "permissive", "maturity": "active", "member_repos": ["cyb3rxp/awesome-soc"], "name": "cyb3rxp/awesome-soc", "platform": [], "pushed_at": "2026-08-26T13:31:32+00:00", "repo": "cyb3rxp/awesome-soc", "stars": 1805, "tags": ["awesome-list", "soc", "csirt", "incident-response", "detection-engineering", "threat-intelligence", "siem", "soar", "dfir", "threat-hunting", "mitre-attack", "security-operations", "web-server"], "topics": ["cert", "csirt", "soc", "siem", "sirp", "soar", "tip", "architecture", "incident-response", "mitre-attack", "purpleteam", "risk-management", "ttp", "detection-engineering", "security-monitoring", "cybersecurity", "dfir", "threat-detection", "threat-hunting"], "urls": [], "use_cases": ["build a security operations center from scratch", "learn detection engineering best practices", "find SOC playbooks and SOPs", "mature an existing SOC with metrics and KPIs", "learn threat intelligence and threat hunting", "find resources for incident response team setup", "explore AI use cases in security operations"], "what_it_is": "A curated awesome-list knowledge base and operational handbook for building, running, and maturing a Security Operations Center (SOC) and CSIRT. It aggregates must-read papers, tools, playbooks, metrics, and best practices across detection engineering, threat intelligence, and SOC automation.", "when_to_avoid": ["you need runnable software rather than a curated list of links", "you want hands-on labs or tutorials rather than reference material", "you need vendor-specific product documentation"], "when_to_choose": ["you are standing up or maturing a SOC/CSIRT and need curated guidance", "you want a single reference of vetted papers, tools, and playbooks for security operations", "you are a SOC analyst or manager looking for training and process resources"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/awesome-soc", "repo": "cyb3rxp/awesome-soc", "role": "main", "score": 77}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:38.947298+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:21:33.157405+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "8fb569d027adc768cfa2e7e4038b32957bedc4699471ef39fca81e373f93410e", "fetched_at": "2026-08-28T04:05:38.947298+00:00", "kind": "readme", "missing": false, "url": "https://github.com/cyb3rxp/awesome-soc"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1471, "days_push": 7, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 77, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}