SOCAutomation Documentation Portal

Welcome to the central documentation hub for the SOCAutomation product suite. Click on a topic to access the documentation for the selected Application.

Dashboard

View statistics and KPIs, and perform Incident management and investgation directly from the dashboard.

SIEM Optimizer: Gap Analysis

Discover how your SIEM is performing and where critical gaps can be filled.

Case Management

Manage Incidents and investigations. Escalate, assign and run automations for detected threats and attacks.

DataHelix AI

View DataHelix reports and investigations, and run your own AI queries using the DataHelix Security Bot.

CyberFlow

Create, edit and view custom workflows and automations for speciifc use-cases in your environment.

SmartIR

Configure filters, enrichment, rule searches and pipeline ingestion.

Appliance Configuration

View and configure managed appliances in the SOCAutomation AI Cluster.

Settings and Administration

Configure users, access, permissions and sessions.