AI SOC Solution
The AI SOC Solution is a ready-to-use security operations workflow that demonstrates how Turbine components work together in a real-world scenario. It combines alert and phishing triage, threat intelligence enrichment, and case and incident management with Hero AIβpowered analysis, investigation plans, and verdicts.
Why Start with a Solution?
Solutions are pre-configured end-to-end use cases that help you:
- Learn Turbine faster - See how components, playbooks, and applications integrate
- Save time - Get productive faster with pre-built automation
- Follow best practices - Learn from working examples
- Reduce errors - Use established, tested workflows
What AI SOC Includes
The AI SOC Solution provides:
- Alert Triage - Ingest and process alerts from SIEM, XDR, EDR, or other sources
- Phishing Triage - Process reported phishing emails
- Threat Intelligence Enrichment - Automatically enrich observables with threat intelligence
- Case and Incident Management - Central application for managing signals, cases, and incidents
- Signal Routing Rules - Route signals to playbooks automatically based on conditions
- AI Ingestion - Build connector and ingestion components from OpenAPI specs with Hero AIβassisted TEDS mapping; use the AI Ingestion application to add new alert sources
- AI-Powered Analysis - Hero AI generates investigation plans and verdicts
Getting Started
To install and configure the AI SOC Solution, see the latest documentation:
- AI SOC SolutionAI SOC Solution β Overview, key capabilities, and next steps
- Installing and Configuring AI SOC SolutionInstalling and Configuring AI SOC Solution β Install, configure assets, Hero AI, and ingestion playbooks
- AI SOC IngestionAI SOC Ingestion β Build connector and ingestion components from OpenAPI specs
Next Steps
After trying the AI SOC Solution:
- Complete Installation and Configuration, then follow Getting Started for your first signal investigation
- Use AI SOC ApplicationsAI SOC Applications to learn the record layout (Signal Triage, Case Management, routing rules, and more)
- Use Operations and GuidanceOperations and Guidance for day-to-day workflows (claim, verdict, escalate, triage rules, playbooks)
- For dashboards, reports, troubleshooting, and examples, see the AI SOC Solution next steps table