Threat Intelligence Integrations — Defensive Security
Integrations for threat intelligence APIs — indicators of compromise, reputation checking, and SIEM enrichment.
Built with Python, MISP, IBM QRadar, REST APIs
Defensive Security
SOC Register
A security operations management application for tracking SOC activities, incidents, users, roles, and operational records.
| Category | Defensive Security |
|---|---|
| Technologies | TypeScript, Next.js, PostgreSQL, RBAC |
| Links | source |
Overview
SOC Register is an operations management application built for security operations centers. It gives a SOC team one place to log activities, track incidents through their lifecycle, and manage users and roles — replacing the spreadsheets that most teams quietly depend on.
Problem
SOC teams generate a constant stream of operational records: shift activities, incident tickets, escalations, and follow-ups. Spreadsheets do not enforce structure, cannot enforce access control, and make reporting painful.
Solution
A purpose-built web application with structured records for SOC activities and incidents, role-based access control for analysts, leads, and managers, and views designed around how a SOC shift actually works.
Key features
- Activity and incident registers with structured fields
- Role-based access control (analyst, lead, manager)
- Search and filtering across operational records
- Audit-friendly record history
Lessons learned
Operational tooling succeeds or fails on data entry friction — the fastest path from “something happened” to “it is recorded” wins.
Related projects
PassGuardJS — Open Source
An open-source JavaScript and TypeScript password strength and password policy validation library.
Built with TypeScript, JavaScript, npm
Security Automation Scripts — Automation
Python and Bash scripts for vulnerability scanning, threat intelligence, security monitoring, and repetitive security workflows.
Built with Python, Bash, REST APIs