One of our partners, TNO from the Netherlands, proudly launched SOARCA, an open-source SOAR (Security Orchestration, Automation and Response) tool. Project leads from TNO would gladly give a demo to members of ETIS, and engage in some Q&A. In order to participate, please register via the link on this landing page.
Upon approval of your registration, you will receive an MS Teams link which we encourage you to 'add to calendar".
Some background
SOARCA is a security orchestrator that can ingest, validate and execute machine-readable security playbooks. It was built to support TNO's research and innovation work and allows SOC and CERT teams to experiment with the concept of playbook driven security automation. Importantly, SOARCA offers native support for the emerging technology standards CACAOv2 and OpenC2, both developed and maintained by OASIS Open. TNO believes that SOARCA is in fact the world's first open-source tool that conforms to these standards. SOARCA also comes with native http(s), SSH and OpenC2 capabilities to interact with external tools and data resources. These native capabilities can be extended via an open interface, allowing developers to compile additional integrations according their needs.
More information
Product showcase:
https://cossas-project.org/portfolio/SOARCA/
Linkedin announcement:
https://www.linkedin.com/feed/update/urn:li:activity:7175771943072092160
Get the software:
https://github.com/COSSAS/SOARCA
Documentation can be found at:
https://cossas.github.io/SOARCA/docs/