awesome-soc
github.com/cyb3rxp/awesome-soc ↗A curated knowledge base to build, run and mature a SOC (including CSIRT).
1.8k
GitHub Stars
144
Curated Resources
11
Categories
4 hours ago
Last Refreshed
For a SOCFor a CERT/CSIRTGlobally (SOC and CERT/CSIRT)MITRE referencesMITRE referenceDedicated pagesDisconnect (as much as possible) SOC from monitored environment📚 Must Read📖 Nice to ReadSOC sensors, nice to haveHarden SOC/CSIRT environment
Use this list with your AI agent
Add the Context Awesome MCP server to Claude, Cursor, or any MCP client, then ask:
"Show me cloud & platforms resources from awesome-soc"
Installation instructions →What's inside
For a SOC
MITRE reference
Globally (SOC and CERT/CSIRT)
SOC sensors, nice to have
📖 Nice to Read
- Amazon, AWS Security FundamentalsCloud & Platforms
- Austin Songer, Incident playbookIncident Response
- BitDefender, Analyzing MITRE ATT&CK evaluations 2024Benchmarks & Surveys
- CISA, Cybersecurity incident and vulnerability response playbooksIncident Response
- CIS, Business Impact Analysis toolStandards & Controls
- CNIL, 2025 reportMiscellaneous Resources
French CNIL's report for 2025.
📚 Must Read
- ANSSI (FR), EBIOS RM methodologyFrameworks & Methodologies
- CISA, Cyber Defense Incident Responder roleRoles & Responsibilities
- CyberVigilance, Mitre Engenuity Evaluations 2022 reviewUse Cases & Implementations
- ENISA, Cybersecurity certificatesCompliance & Regulations
- Expel, Reduce FP in a SOCFrameworks & Methodologies
Reduce FP in a SOC.
- FireEye, OpenIOC formatThreat Intelligence
Harden SOC/CSIRT environment
Showing a sample of 144 resources. View the full list on GitHub →