Tracecat is an open-source automation platform for security teams. The developers believe security automation should be accessible to everyone, especially understaffed small- to mid-sized teams. Core features, user interfaces, and day-to-day workflows are based on existing best practices from best-in-class security teams. Use specialized AI models to label, summarize, and enrich alerts. Contextualize alerts with internal evidence and external threat intel: Find cases using semantic search MITRE ATT&CK labels Whitelist / blacklist identities Categorize related … More →

The post Tracecat: Open-source SOAR appeared first on Help Net Security.