Solutions and Applications
Turbine solutions are end-to-end use cases that contain components, playbooks, and assets that are mostly preconfigured to reduce a practitioner's time and level of effort when creating common security solutions.
Current Turbine Solutions
Solutions are available in Turbine under Library → Swimlane Content. Current solutions and extensions include:
Solution | Description |
|---|---|
AI SOC SolutionAI SOC Solution | AI-powered SOC solution for alert ingestion, signal triage, threat intelligence enrichment, and case management. Includes Hero AI–driven investigation plans, signal routing rules, dashboards, reports, and the AI Ingestion application for building connectors and ingestion pipelines. |
SOC Solutions BundleSOC Solutions Bundle | Security operations center solution for SOC workflows, triage, and response. |
Swimlane AI Agents Case Management ExtensionSwimlane AI Agents Case Management Extension | Part of the SOC Solutions Bundle. Provides Hero AI agents and a unified UI to speed up SOC analyst workflows for triage, investigation, and incident response. Integrates with the Case and Incident Management (CIM) application; includes on-demand and automated Hero AI analysis, verdict and threat intelligence analysis, and MITRE ATT&CK & D3FEND mapping. Install from Library → Swimlane Content after the SOC Solutions Bundle is installed. |
Business Continuity Management (BCM) SolutionBusiness Continuity Management (BCM) Solution | End-to-end use case for business continuity and resilience planning, testing, and response. |
Compliance Audit Readiness (CAR) SolutionCompliance Audit Readiness (CAR) Solution | Solution for managing compliance controls, evidence, and audit readiness. |
Collaboration ExtensionCollaboration Extension | Extends Turbine with collaboration capabilities across teams and workflows. |
Crafted AI PromptsCrafted AI Prompts | Prebuilt AI prompts and configurations for common security and automation tasks. |
Detection Engineering ExtensionDetection Engineering Extension | Supports detection rule development, testing, and lifecycle management. |
Vulnerability Response Management (VRM)Vulnerability Response Management (VRM) | End-to-end vulnerability management from discovery through remediation and reporting. |
Install solutions from the Content Library; each solution’s documentation covers installation, configuration, and usage.
Why use solutions?
- Helps newer users to learn Turbine
- Accelerates user's self-sufficiency
- Demonstrates playbook best practices
- Saves time configuring a playbook from scratch, decreases user errors, and identifies established playbook practices for use in future playbooks
- Achieves common outcomes quickly on an ongoing basis
Where can I find solutions?
Solutions can be found in the Library in Turbine. Open Library and select Swimlane Content. Solutions, along with components and connectors, are available only in Swimlane Content. Browse and install solutions from there.
Applications in Solutions
See Applications and Applets for details about building and managing Turbine applications and applets. You can use applications separately or with Turbine solutions. Applications can assist with threat intelligence, case and incident management, alert, and phishing triage, and any other situation where interacting with records is required. This section provides information for the processes, installation, and configuration on current Turbine solutions and/or applications.