{"repo":"COSSAS/SOARCA","free":true,"listed":false,"github":"https://github.com/COSSAS/SOARCA","clone":"git clone https://github.com/COSSAS/SOARCA.git","description":"SOARCA - The Open Source CACAO-based Security Orchestrator!","language":"Go","stars":107,"topics":["automation","cacao","cacao-playbooks","cybersecurity","soar"],"license":"Apache-2.0","category":"workflow-automation","readme_excerpt":"Automate threat and incident response workflows with CACAO security playbooks Context and backgound Organisations are increasingly automating threat and incident response through playbook driven security workflow orchestration. The essence of this concept is that specific security events trigger a predefined series of response actions that are executed with no or only limited human intervention. These automated workflows are captured in machine-readable security playbooks, which are typically executed by a so called Security Orchestration, Automation and Response (SOAR) tool. The market for SOAR solutions has matured significantly over the past years and present day products support sophisticated automation workflows and a wide array of integrations with external security tools and data resources. Typically, however, the technology employed is proprietary and not easily adaptable for research and experimentation purposes. SOARCA aims to offer an open-source alternative for such solutions that is free of vendor dependencies and supports standardized formats and technologies where applicable. SOARCA was developed for research and innovation purposes and allows SOC, CERT and CTI professionals to experiment with the concept of playbook driven security automation. It is open and extensible and its interfaces are well-defined and elaborately documented. Importantly, it offers native support for the emerging technology standards CACAOv2 and OpenC2, both developed and maintained by O","default_branch":null,"files":null,"tree":[],"storefront":"/r/COSSAS","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/COSSAS/SOARCA/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}