SOC Solution

overview the soc solutions bundle is a set of interconnected solutions that provide a structured, end to end security operations workflow it combines alert triage, phishing triage, threat intelligence enrichment, and case/incident management into a single, guided experience what the bundle includes alert triage ingest and process alerts from siem, xdr, edr, or similar sources phishing triage process reported phishing emails and extract observables threat intelligence enrich observables to prioritize and classify events case and incident management track signals, cases, and incidents through resolution optional extension ai agents case management if available in your environment, the ai agents case management extension adds hero ai powered analysis to accelerate investigations why start here see how applications, playbooks, and components work together learn common soc workflows and best practices use the bundle as a blueprint for your own automations learn more for detailed installation, configuration, and usage, see the soc solutions bundle documentation https //docs swimlane com/solutions/soc solutions bundle