๐ก๏ธ SOC Toolkit v6.0
โโโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโโ โโโโโโโ โโโโโโโ โโโ โโโ โโโโโโโโโโโโโโโ
โโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโโโโโโโโโโโโโโ
โโโโโโโโโโโ โโโโโโ โโโ โโโ โโโโโโ โโโโโโ โโโโโโโ โโโ โโโ
โโโโโโโโโโโ โโโโโโ โโโ โโโ โโโโโโ โโโโโโ โโโโโโโ โโโ โโโ
โโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโโโโ โโโ
โโโโโโโโ โโโโโโโ โโโโโโโ โโโ โโโโโโโ โโโโโโโ โโโโโโโโโโโ โโโโโโ โโโ
โก Autonomous AI Threat Intelligence & Incident Response Platform
โก Quick Start
# 1. Install via pip
pip install soc-toolkit
# 2. Perform instant Threat Intel Lookup with AI Triage
soc 185.220.101.45
# 3. Launch Interactive Analyst Terminal Shell
soc shell
# 4. Start Enterprise REST API Server
soc server --port 8000
# 5. Launch 3D Cyber Threat Warfare Dashboard
soc web --port 8080
๐ฅ Features at a Glance
| Feature | Description | Command |
|---|---|---|
| ๐ค Autonomous AI Analyst | Root Cause Analysis (RCA) & Cyber Kill Chain Attribution | soc ai <ioc> |
| ๐ Automated SOAR Engine | Executes containment, host isolation & firewall bans | soc soar <ioc> |
| ๐ Compliance Audit | Maps findings to PCI-DSS 4.0, ISO 27001, SOC 2 & NIST CSF | soc audit <ioc> |
| โก Production REST API | Multi-tenant JSON REST API backend with key auth & CORS | soc server --port 8000 |
| ๐ก STIX / TAXII 2.1 | TAXII 2.1 feed server for Palo Alto, Fortinet & EDRs | soc taxii-server |
| ๐ฆ PCAP Forensics | Native network packet capture parser & IOC extractor | soc pcap capture.pcap |
| ๐ฌ Static PE Malware Analysis | ImpHash calculator, section entropy & suspicious API detection | soc analyze sample.exe |
| ๐ Payload Decoder | Defang/Refang URLs & Base64 PowerShell command decoder | soc decode "<cmd>" |
| ๐ธ๏ธ 3D Threat Dashboard | High-tech WebGL cyber warfare threat map | soc web --port 8080 |
๐ค Autonomous AI Security Analyst
Run instant AI triage on any IP, Domain, Hash, or URL:
soc ai 185.220.101.45
{
"ioc": "185.220.101.45",
"threat_level": "CRITICAL",
"cyber_kill_chain_phase": "Command and Control (C2) / Exfiltration",
"root_cause_analysis": "Autonomous AI Analysis concluded an overall risk score of CRITICAL. Attribution indicates active alignment with Cyber Kill Chain phase: 'Command and Control (C2)'. Network containment recommended.",
"ciso_executive_summary": "EXECUTIVE SUMMARY: Indicator 185.220.101.45 poses a CRITICAL risk to enterprise operations. Authorize automated SOAR containment."
}
๐ Regulatory Compliance Frameworks Supported
| Framework | Controls Mapped | Command |
|---|---|---|
| PCI-DSS 4.0 | Req 6.4 (App Security), Req 10.4 (Audit Telemetry), Req 11.4 (Threat Defense) | soc audit <ioc> |
| ISO/IEC 27001:2022 | Control A.8.7 (Malware Defense), A.8.16 (Monitoring), A.8.23 (Web Filtering) | soc audit <ioc> |
| SOC 2 Type II | CC6.1 (Access Controls), CC6.8 (Threat Detection), CC7.2 (Incident Response) | soc audit <ioc> |
| NIST CSF 2.0 | DE.CM-01 (Continuous Monitoring), RS.AN-01 (Incident Analysis) | soc audit <ioc> |
๐ณ 1-Click Container Deployment
# Docker Compose 1-Click Launch
docker-compose up -d
# Kubernetes Production Deployment
kubectl apply -f k8s/deployment.yaml
๐ Python SDK
from soc_toolkit import SOCToolkitSDK, AIThreatAnalyst, SOAREngine, IOCType, ThreatLevel
sdk = SOCToolkitSDK()
# Analyze IOC
report = sdk.analyze("185.220.101.45")
# Autonomous AI Triage
ai_triage = AIThreatAnalyst.analyze_threat("185.220.101.45", IOCType.IP, ThreatLevel.CRITICAL)
print("Kill Chain Phase:", ai_triage["cyber_kill_chain_phase"])
๐ค Author & License
- Author: Furkan Dinรงer (@frkndncr)
- License: MIT License
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
soc_toolkit-7.0.0.tar.gz
(79.8 kB
view details)
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file soc_toolkit-7.0.0.tar.gz.
File metadata
- Download URL: soc_toolkit-7.0.0.tar.gz
- Upload date:
- Size: 79.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.1
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3c811c7652aa6c77139d63dc1ce7d5afb3ef336c5204f1c77c9ded973452b4b1
|
|
| MD5 |
199f55e0f047c142a9b67525de5ff3fb
|
|
| BLAKE2b-256 |
e4338d9f0ee97c5d0d3e97eba814d1f5fcf8dde987da296815de784ef33a2a8b
|
File details
Details for the file soc_toolkit-7.0.0-py3-none-any.whl.
File metadata
- Download URL: soc_toolkit-7.0.0-py3-none-any.whl
- Upload date:
- Size: 98.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.1
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
a384b2f7cfad645122a67e9d2eef5b6d4afc24bd7c1cc3a676337c818ed94879
|
|
| MD5 |
823ca6efa269b52613fbb3991e49f292
|
|
| BLAKE2b-256 |
05fc574d8818cf229fcc50c46b471b265fe83f3a42ac72eab10542912b2f23cb
|
