Why Simulation Matters for SOC Validation: SAFE4SOC’s UC Simulator SAFE4SOC’s decision to develop a dedicated use-case simulator emerged from practical necessity. External cyber-range availability and integration constraints made reliance
Read MoreIDMEFv2, Theory and Practice, WEBINAR IDMEFv2, Theory and Practice, June 26 – (2 p.m.- 4 p.m.) On June 26, the IDMEFv2 Task Force is organizing a webinar on IDMEFv2
Read MoreTesting Before Trust: Tool Validation in SAFE4SOC WP4 and WP7 meetings in mid-2025 repeatedly stressed the importance of validation. Integrating multiple tools, connectors, and AI components requires systematic testing
Read MoreTurning Standards into Practice: SAFE4SOC WP4 Tooling Efforts WP4 meetings in spring 2025 focused on a recurring challenge: standards only create impact when they are supported by usable tools.
Read MoreChoosing Scope Carefully: Tooling Decisions in SAFE4SOC WP4 and WP6 meetings in 2025 showed that impact sometimes comes from restraint. Faced with broad initial ambitions, SAFE4SOC narrowed tooling scope
Read MoreOpen Source in Practice: Constraints Observed in SAFE4SOC WP6 WP6 meetings in spring 2025 provided a realistic view of open-source dissemination. While community engagement is valuable, it requires sustained
Read MoreIntegrating AI into SOC Workflows: SAFE4SOC’s Approach SAFE4SOC’s WP5 and WP7 coordination in April 2025 focused on integrating AI outputs into realistic SOC workflows. Rather than treating AI as
Read MorePrioritising SOC Tool Connectors: Lessons from SAFE4SOC WP6 WP6 discussions in April 2025 highlighted the difficulty of selecting which SOC tools to support within a limited project scope. The
Read MoreKnowing the Limits of AI in SOC Contexts: SAFE4SOC Perspective SAFE4SOC’s AI discussions in 2025 were notable for their realism. Partners explicitly defined where AI meaningfully supports SOC operations
Read MoreExplainable AI for SOCs: SAFE4SOC’s Practical Perspective WP5 and WP7 coordination meetings in March 2025 stressed that AI outputs must be understandable to SOC analysts. Models that cannot be
Read More