You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: doc/soarca.md
+5-5
Original file line number
Diff line number
Diff line change
@@ -1,25 +1,25 @@
1
-
# SOAR-CA
1
+
# SOARCA
2
2
The TNO Cyber ORCA.
3
3
4
4

5
5
6
6
## Goals of SOARCA
7
-
SOAR-CA or SOARCA stands for Security Orchestration Automation and Response CAcao. Which means it is a soar tool designed to work with OASIS CACAO. SOAR-CA also supports STIX.
7
+
SOARCA stands for Security Orchestration Automation and Response CAcao. Which means it is a soar tool designed to work with OASIS CACAO. SOARCA also supports STIX.
8
8
9
9
10
10
## Design decisions
11
-
To allow for fast execution and type safe development SOAR-CA is developed in `GOLANG`. The application application can be deployed in `Docker`. Further dependencies are `MQTT` for the module system and `go-gin` for the REST API.
11
+
To allow for fast execution and type safe development SOARCA is developed in `GOLANG`. The application application can be deployed in `Docker`. Further dependencies are `MQTT` for the module system and `go-gin` for the REST API.
12
12
13
13
14
14
## Example use case
15
-
As a starting example for SOAR-CA is ingesting a STIX2 message with an malicious URL. In turn this will trigger a playbook which will produce several Coarse of Action which can be executed by the operator/ be automatically executed.
15
+
As a starting example for SOARCA is ingesting a STIX2 message with an malicious URL. In turn this will trigger a playbook which will produce several Coarse of Action which can be executed by the operator/ be automatically executed.
16
16
17
17
The main focus is to show the working of the API for:Workflows, CoAs and STIX endpoint in combination with the module system.
Following our [Getting started](/docs/getting-started/) guide will help you setup SOARCA and configure the SOAR for your internal security tooling. For more custom requirement
Copy file name to clipboardexpand all lines: docs/content/en/docs/about/_index.md
+1-4
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ description:
6
6
7
7
## About COSSAS
8
8
9
-
SOARCA finds its home within the Community for Open Source Security Automation Software (COSSAS). [COSSAS](https://cossas-project.org/') offers a continuously expanding base of novel software components for cyber security automation that SOC, CERT and CTI professionals can deploy and trial in their own operational environments. COSSAS is part of the TNO.
9
+
SOARCA finds its home within the Community for Open Source Security Automation Software (COSSAS). [COSSAS](https://cossas-project.org/') offers a continuously expanding base of novel software components for cyber security automation that SOC, CERT and CTI professionals can deploy and trial in their own operational environments. COSSAS is an initiative of the TNO.
10
10
11
11
## About TNO
12
12
@@ -15,6 +15,3 @@ SOARCA is an project initiated and support by [TNO](https://tno.nl), the Netherl
Copy file name to clipboardexpand all lines: docs/content/en/docs/concepts/_index.md
+3-3
Original file line number
Diff line number
Diff line change
@@ -41,16 +41,16 @@ Both inside and outside of TNO there is a strong need for interoperable workflow
41
41
42
42
SOAR functionality is relevant not only for automation in incident response handling, but also attack & defense simulations, cyber ranges, digital twinning and other (TNO research) topics that have a strong dependence on the orchestration of complex workflows.
43
43
44
-
### Current state of Soarca
44
+
### Current state of SOARCA
45
45
46
46
At present, SOARCA is in an Alpha release phase and is intended for Proof of Concepts (PoCs) and research purposes, serving as a platform for demonstrations. The objective of the SOARCA team is to evolve SOARCA into a more mature SOAR orchestration tool suitable for operational environments. For potential applications of SOARCA, please refer to the ‘Use-Cases’ section of our documentation.
47
47
48
48
### Why making Soarca open-source?
49
49
50
50
- SOARCA has been publicly funded and should therefore ideally be made publicly available.
51
51
- The target audience of SOC, CERT/CSIRT and CTI teams has a very strong affinity with open-source solutions and embraces them to a great extent. (see also the success of MISP, OpenCTI, The-Hive, ...)
52
-
- Open-source software provides a low barrier for partner organisations to collaborate with TNO and contribute to further development.
53
-
- Open Source software and tooling can easily be brought in as background into projects and partnerships such as HEU, EDF, TKI projects and others. The use of open-source tooling is explicitly encouraged by the European Commission.
52
+
- Open-source software provides a low barrier for partner organisations to collaborate and contribute.
53
+
- Open Source software and tooling can easily be brought in as background into projects and partnerships such as HEU, EDF, or National funded projects and others. The use of open-source tooling is explicitly encouraged by the European Commission.
0 commit comments