AiSOC

AiSOC is an open-source system for security monitoring and response that takes in security data, detects and groups threats, and uses AI agents—software that can choose and call tools—to investigate them while recording their reasoning. ^[1a][1b] It converts incoming security data into a common format, runs detection rules, groups alerts into incidents, and proposes a response that a human approves before any vendor is contacted. ^[2] A supported use case is sending an event such as “Encoded PowerShell from Office” on a host into AiSOC so it becomes an alert. ^[3a][3b]