awesome-soc
github.com/cyb3rxp/awesome-soc ↗A curated knowledge base to build, run and mature a SOC (including CSIRT).
1.9k
GitHub Stars
150
Curated Resources
11
Categories
1 hour ago
Last Refreshed
For a SOCFor a CERT/CSIRTGlobally (SOC and CERT/CSIRT)MITRE referencesMITRE reference🔗 Dedicated pagesDisconnect (as much as possible) SOC from monitored environment📚 Must Read📖 Nice to ReadSOC sensors, nice to haveHarden SOC/CSIRT environment
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me threat intelligence resources from awesome-soc"
Installation instructions →What's inside
For a SOC
MITRE reference
Globally (SOC and CERT/CSIRT)
📚 Must Read
- 2025 threat landscapeThreat Intelligence
- ANSSI (FR), EBIOS RM methodologyFrameworks & Methodologies
- CISA, Cyber Defense Incident Responder roleRoles & Responsibilities
- CyberVigilance, Mitre Engenuity Evaluations 2022 reviewUse Cases & Implementations
- ENISA, Cybersecurity certificatesCompliance & Regulations
- Expel, Reduce FP in a SOCFrameworks & Methodologies
Reduce FP in a SOC.
SOC sensors, nice to have
📖 Nice to Read
- Amazon, AWS Security FundamentalsCloud & Platforms
- Austin Songer, Incident playbookIncident Response
- BitDefender, Analyzing MITRE ATT&CK evaluations 2024Benchmarks & Surveys
- CISA, Cybersecurity incident and vulnerability response playbooksIncident Response
- CIS, Business Impact Analysis toolStandards & Controls
- CNIL, 2025 reportMiscellaneous Resources
French CNIL's report for 2025.
Harden SOC/CSIRT environment
Showing a sample of 150 resources. View the full list on GitHub →