Back to the marketplace · Solution
Security operations (SOC T1/T2/T3)
A T1 triage analyst and a T2 investigator: alert triage, entity context, evidence timelines, investigation reports, hunting plan drafts and shift handovers; every response action is a recommendation.
Copy this sentence and send it to any colleague in Teloa:In Teloa, open Marketplace, search for "Security operations (SOC T1/T2/T3)" and add it (entry teloa.soc).
- Source
- Teloa official
- License
- Apache-2.0
License files: LICENSE - Review
- Reviewed by Teloa on 2026-09-25
- Compatibility
- Needs configuration · Teloa >=0.2.0-alpha.6 · DSH 0.1.7-rc.1
- T1 triage of uploaded alerts verified with a real model on 2026-09-25: classification, severity, confidence, evidence gaps and escalation.
- Live triage and investigation need your own read-only SIEM/EDR connection; no vendor credentials are included.
- Permissions and requirements
- Permissions it will ask for:
- Read-only access to alerts, logs, directory and assets
- Only with your confirmation: closing or suppressing alerts, disabling accounts, isolating hosts or changing rules
Network at run time: no - Data flow
- Files ship pinned inside the Teloa release; nothing is downloaded when you add it. This site collects no user information.
Entry teloa.soc · version 1.0.1