AI-turbocharged detection intelligence. Enable line-speed cyberattack detection with AI trained on 11 years of Detection Intelligence.socprime.com United StatesJoined June 2015
@struppigel You are right that the source attribution is not visible enough on the page. We appreciate the feedback and will use it to improve how source authors and original research are credited in the UX. Thank you!
@struppigel Sorry for the confusion, and thank you for calling this out. Our intention was not to present your team’s research as our own, but to show how we operationalized the original intelligence into actionable next steps: MITRE ATT&CK Flow, ready-to-deploy detections, and validations
🎉 DetectFlow Enterprise is live!
Main differences with the open source version:
- Attack chains: stitch detection correlations into a threat report
- Log & user management: operational features for enterprises
- SLAs & support: smooth platform deployment and product upgrades
We open-sourced DetectFlow, a detection intelligence engine that runs Sigma detections on Kafka streams via Flink. Thousands of rules, millisecond matching, before data hits the SIEM. No vendor lock-in. Works air-gapped.
Get repo here: github.com/socprime/detec…#soc
@savvy___guy Yes, top 3 scaling problems we solved:
1️⃣ Rule volume:
12K+ Sigma rules/pipeline on Flink, horizontal scaling by adding pipelines
2️⃣ Downtime on updates:
hot-reload via Kafka, zero downtime
3️⃣ Layered detection:
topic chaining lets one pipeline feed the next
@codename_riiky Events arrive at your SIEM pre-tagged with MITRE ATT&CK labels and severity scores. Better data in and better alerts out. No need to compete for resources with thousands of detections.
@codename_riiky That means you stop paying to ingest and index events you've already classified.
ML/UEBA and pattern matching solve different problems. DetectFlow handles high-volume rule matching upstream so your SIEM's ML /behavioral analytics can focus on what they're good at.
‼️ To stay safe, please always verify any job opportunity via our official website or trusted job platforms where SOC Prime has an official company page.
🚨 Important Notice for SOC Prime Job Seekers
At SOC Prime, we’re proud to share that we recently secured a new round of investment. This is a milestone that reflects our continued growth and commitment to cybersecurity innovation.
@NetoxOy partners with SOC Prime to make detection engineering 70% leaner, false positives 35% lower, and shipping new detections 3X faster. The result? MDR services that run smarter, sharper, and always stay ahead of the curve.
Read More: socprime.com/customer-succe…
42K Followers 9K FollowingInformation security - #SIEM, #DFIR, #EDR formerly at Gartner! Now @GoogleCloud Office of the #CISO; host of @CloudSecPodcast https://t.co/VpKtfz8nXG
100 Followers 392 FollowingThe world's first training platform for detection engineers, supporting multiple SIEM languages and using real logs to hone threat detection skills!
253 Followers 2K FollowingI need a punctuation mark that is halfway between a period and an exclamation point so I can answer texts without sounding bored or insane.
414 Followers 4K FollowingIT/Infosec Practitioner | BTL1 | CySA+, Sec+, Net + | Forensic Psych Guy
| Practicing Stoicism as a way of life | Video Game kid for life
68 Followers 246 FollowingSecurity Researcher #ThreatIntelligence #CyberCrime Sharing personal thoughts. Not affiliated with or representing my employer. #Team_D4rkn3ttz
22K Followers 93 FollowingMISP - Threat Sharing. An open source software and standards to share, create and validate threatintel and intelligence.
Mastodon @[email protected]
42K Followers 9K FollowingInformation security - #SIEM, #DFIR, #EDR formerly at Gartner! Now @GoogleCloud Office of the #CISO; host of @CloudSecPodcast https://t.co/VpKtfz8nXG
2K Followers 8 FollowingFull-time momentum trader for 11 years.
I scan small-caps for breakout opportunities daily.
Pattern recognition and volume analysis guide me.
Join my WhatsApp
336 Followers 2K FollowingWithout (log)data you’re just another person with an opinion. 4688+cmdLine, or it Did’nt happen. Love to build and secure all the things
39K Followers 8K FollowingCybersecurity researcher focused on threat intel & APTs. Breaking down attacks, hunting threats, and crafting YARA rules. Buddy @ Three Buddy Problem
18 Followers 1 FollowingСпільнота фахівців з кібербезпеки для навчання, нетворкінгу та обміну досвідом щодо побудови систем лог менеджменту, SIEM та SOAR.
2K Followers 280 FollowingMicrosoft MVP, #MEM, #Security and #Automation. Technical Editor for https://t.co/XtSjS7BiZr. Security @ https://t.co/paena7PabW. Tweets are my own
114 Followers 103 Following#HackingHired in a world of 1's and 0's we make sure to Find the 1 for you. || Recruiting IT Security, Cybersecurity & InfoSec || Sponsor of #CCofAZ
566 Followers 3K FollowingOpenCV veterans, passionate about innovations in computer vision and focused on object detection, facial recognition and automated video content analysis
3K Followers 2K FollowingTask Force 7 Radio, with your host George Rettas, is the Voice of Cyber Security. #CyberSecurity #InformationSecurity #Security #Tech #News
254K Followers 3K FollowingAl 👉 seguirnos, te compartiremos información de calidad sobre #Hacking, Somos una empresa 🐲 👇 Colombiana de servicios en #SeguridadInformática
117K Followers 514 FollowingMITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://t.co/wt46ArkZVt