OWASP Security Operations Center (SOC) Framework Project - Revision history

Faisal.naqvi: Presentation uploaded, Link of presentation added in Quick Download and Presentation Heading, Name of Eduardo Estevao added in Other Contributors, Formatting done on Description

2019-02-21T07:16:40Z

Presentation uploaded, Link of presentation added in Quick Download and Presentation Heading, Name of Eduardo Estevao added in Other Contributors, Formatting done on Description

Faisal.naqvi: Mailing List Link

2018-04-08T10:59:47Z

Mailing List Link

Faisal.naqvi: Link correction

2018-03-11T08:53:10Z

Link correction

Faisal.naqvi: Link of presentation given at SecOps Europe 2018

2018-03-11T08:51:58Z

Link of presentation given at SecOps Europe 2018

Faisal.naqvi: Contact Details in Getting Involved Tab

2017-05-30T10:57:02Z

Contact Details in Getting Involved Tab

Faisal.naqvi: Headings

2017-05-25T16:48:46Z

Headings

Faisal.naqvi: OWASP SOC Framework Tab

2017-05-25T16:46:25Z

OWASP SOC Framework Tab

Faisal.naqvi at 16:38, 25 May 2017

2017-05-25T16:38:16Z

Faisal.naqvi at 16:34, 25 May 2017

2017-05-25T16:34:09Z

Faisal.naqvi: OWASP SOC Framework tab

2017-05-25T16:30:03Z

OWASP SOC Framework tab

@@ Line 17: / Line 17: @@
 The Deliverable of this project will be as follows:
 Security Operations Center (SOC) Framework
-Trainings:
+''<u>Trainings:</u>''
 Security Operations Center (SOC) Analyst
@@ Line 28: / Line 26: @@
 Security Operations Center (SOC) Manager
-Other Documents:
+''<u>Other Documents:</u>''
 Security Operations Center (SOC) Assessment
@@ Line 52: / Line 50: @@
 == Presentation ==
-Coming Soon<br>
+[https://www.owasp.org/images/0/0a/OWASP_Security_Operations_Centre_%28SOC%29_Framework_Project_Presentation.pdf OWASP SOC Framework]<br>
 == Project Leader ==
@@ Line 70: / Line 68: @@
 == Quick Download ==
-Coming Soon
+* [https://www.owasp.org/images/0/0a/OWASP_Security_Operations_Centre_%28SOC%29_Framework_Project_Presentation.pdf OWASP SOC Framework Presentation - PDF]
 == News and Events ==
 * [24 Jan 2018] [https://youtu.be/amJGiqEm48s Presentation at SecOps Europe 2018]
 * [2 May 2017] Project Initiation
@@ Line 156: / Line 155: @@
 Other Contributors
-* Your Name can appear here
+* Eduardo Estevao
 = Road Map and Getting Involved =

← Older revision		Revision as of 10:59, 8 April 2018
Line 82:		Line 82:

	Coming Soon		Coming Soon
		+
		+	== Mailing List ==
		+
		+	* [https://lists.owasp.org/mailman/listinfo/owasp-socframework-project Mailing List]

	==Classifications==		==Classifications==

@@ Line 74: / Line 74: @@
 == News and Events ==
-* [24 Jan 2018] [https://youtu.noclick_be/amJGiqEm48s Presentation at SecOps Europe 2018]
+* [24 Jan 2018] [https://youtu.be/amJGiqEm48s Presentation at SecOps Europe 2018]
 * [2 May 2017] Project Initiation
 * [3 Mar 2017] Project Request

@@ Line 74: / Line 74: @@
 == News and Events ==
 * [2 May 2017] Project Initiation
 * [3 Mar 2017] Project Request

@@ Line 179: / Line 179: @@
 * Project administration support.
 * Wiki editing support.
-* Writing support for the book__NOTOC__ <headertabs></headertabs>
+* Writing support for the book
+For involvement in the project or for any feedback/ query, please contact the Project Leader here: [https://www.linkedin.com/in/mfaisalnaqvi/ '''Muhammad Faisal Naqvi,''' ''CISSP, CISA, AMBCI, ITIL, ISMS LA n Master'']
 [[Category:OWASP Project]]
 [[Category:OWASP_Builders]]
 [[Category:OWASP_Defenders]]
 [[Category:OWASP_Document]]

@@ Line 6: / Line 6: @@
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 | valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
-==OWASP Security Operations Center (SOC) Framework Project==
+==OWASP SOC Framework Project==
 A documented Framework for Cyber Security Operations Center (SOC), to develop its Strategy and Design; Setting up , Operate, Manage, Govern, Improve and Innovate SOC.
@@ Line 35: / Line 35: @@
 ==Licensing==
-'''The OWASP Security Operations Center (SOC) Framework is free to use.'''
+'''The OWASP SOC Framework is free to use.'''
 So you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar to this one.
@@ Line 43: / Line 43: @@
 <!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
-== What is OWASP Security Operations Center (SOC) Framework Project? ==
+== What is OWASP SOC Framework Project? ==
 The end goal is to document a Framework for Cyber Security Operations Center (SOC), which will guide in Strategy Design, Setting up , Operate, Manage, Govern, Improve and Innovate a SOC. Currently there is no such framework available from any Government, Non-Government or Commercial Organization.

@@ Line 103: / Line 103: @@
 A) Model
-. Distributed
+# Distributed
-. Centralized
+# Centralized
-. Collaborative
+# Collaborative
-. Constituency
+# Constituency
-. Managed
+# Managed
-. Hybrid
+# Hybrid
 B) Process Flow
-. Identify
+# Identify
-. Consolidation
+# Consolidation
-. Correlation
+# Correlation
-. Intelligence
+# Intelligence
-. Monitoring
+# Monitoring
-. Alert
+# Alert
-. Reporting
+# Reporting
-. Dashboard
+# Dashboard
-. Detection
+# Detection (Signatures/ Behavior)
-a) Signatures
+# Analysis
-b) Behavior
+# Communication
-. Analysis
+# Prioritizing
-. Communication
+# Escalation
-. Prioritizing
+# Authority
-. Escalation
+# Response (Manual/  Automated/ Active/ Passive)
-. Authority
+# Containment
-. Response
+# Forensic Investigation
-a) Manual
+# Recovery
-b) Automated
+# Learning
-c) Active
+# Optimization (Blacklisting/ White-listing)
-d) Passive
+# Metrics
 C) People & Skills
-. SOC Analyst
+# SOC Analyst
-. Incident Handler
+# Incident Handler
-. SOC Expert
+# SOC Expert
-. Admins
+# Admins
-. SOC Manager
+# SOC Manager
 =FAQs=

@@ Line 100: / Line 100: @@
 =OWASP SOC Framework=
 OWASP Security Operations Center (SOC) Framework will address at least following:
 A) Model
-## Distributed
+. Distributed
-## Centralized
+. Centralized
-## Collaborative
+. Collaborative
-## Constituency
+. Constituency
-## Managed
+. Managed
-## Hybrid
+. Hybrid
 B) Process Flow
-## Identify
+. Identify
-## Consolidation
+. Consolidation
-## Correlation
+. Correlation
-## Intelligence
+. Intelligence
-## Monitoring
+. Monitoring
-## Alert
+. Alert
-## Reporting
+. Reporting
-## Dashboard
+. Dashboard
-## Detection
+. Detection
-### Signatures
+a) Signatures
-### Behavior
+b) Behavior
-## Analysis
+. Analysis
-## Communication
+. Communication
-## Prioritizing
+. Prioritizing
-## Escalation
+. Escalation
-## Authority
+. Authority
-## Response
+. Response
-### Manual
+a) Manual
-### Automated
+b) Automated
-### Active
+c) Active
-### Passive
+d) Passive
-## Containment
+. Containment
-## Forensic Investigation
+. Forensic Investigation
-## Recovery
+. Recovery
-## Learning
+. Learning
-## Optimization
+. Optimization
-### Blacklisting
+a) Blacklisting
-### White-listing
+b) White-listing
-## Metrics
+. Metrics
 C) People & Skills
-## SOC Analyst
+. SOC Analyst
-## Incident Handler
+. Incident Handler
-## SOC Expert
+. SOC Expert
-## Admins
+. Admins
-## SOC Manager
+. SOC Manager
 =FAQs=

@@ Line 98: / Line 98: @@
 |}
-=FAQs=
+=OWASP SOC Framework=
 ==How can I participate in your project?==
 All you have to do is make the Project Leader's aware of your available time to contribute to the project. It is also important to let the Leader's know how you would like to contribute and pitch in to help the project meet it's goals and milestones. There are many different ways you can contribute to an OWASP Project, but communication with the leads is key.
@@ Line 107: / Line 154: @@
 = Acknowledgements =
-==Contributors==
+Project Leader
+* [[User:Faisal.naqvi|Muhammad Faisal Naqvi]]
-The first contributors to the project are:
+Other Contributors
 * Your Name can appear here