CLUSTER ATT-LOGS-MITRE · 7 ENTRIES · EARLIEST ENTRY 2026-09-27

SOC log threat detection

This cluster comprises automated log-analysis tools for SOC teams that detect intrusions (e.g., brute-force attempts) and map them to MITRE ATT&CK techniques. They also provide severity reporting and analyst tooling. The cluster's dated history is too thin to read a shape from – it predates the index or its members are undated. Traction leaders are LogsTotal (6 stars), CyberShield-AI-Hackathon (4 stars), and log-analysis-ids (2 stars).

Entry timeline

ENTRY TIMELINE

AUG 2026: 1SEP 2026: 4OCT 2026: 2
AUG 2026OCT 2026

Members by activity

Activity signals, not revenue.

Build origin · 1 hand-coded · 6 unlabelled

Operator · 3 hobby · 1 indie · 1 commercial · 2 unlabelled

Two labels per entry, never collapsed into one: how it was built, and who stands behind it. Counted over the 7 listed below. Unlabelled means nothing has decided yet — not that the answer is small.

  1. 01LogsTotal6★22 dayslivehobbyLog analysis platform that runs multiple detection engines over uploaded event logs and reports threats with severity, MITRE ATT&CK context, and analyst tooling.
  2. 02CyberShield-AI-Hackathon4★23 days—hobbyAutonomous cybersecurity platform that deploys decoy services to entangle attackers, captures session telemetry, correlates MITRE ATT&CK techniques, and provides an operator console.
  3. 03log-analysis-ids2★20 days—Security system that analyzes logs and detects intrusions using MITRE ATT&CK techniques for SOC teams.
  4. 04soc-log-analyzer1★6 days—hobbyLog analyzer that helps security teams detect brute force attacks, suspicious logins, and multiple users from a single IP address.
  5. 05Soc-Threat-Triage0★today—Automated security tool for SOC analysts that detects brute-force login attempts from system logs and maps threats to MITRE ATT&CK.
  6. 06MAIR-SUITE-DFIR-Threat-Analysis0★1 mo—hand-codedindieAutomated malware analysis and incident response suite with static/dynamic analysis, YARA scanning, memory forensics, and MITRE ATT&CK reporting.
  7. 07AlphaSOC AE0★unknownlivecommercialNetwork security analytics engine that processes telemetry logs to detect infected hosts, threats, and attacks, alerting security teams via SIEM integrations.