¶ Welcome to the SOC.OS Wiki! 
Here you'll find all the information you need to understand how SOC.OS works, how to get onboarded, and how to use the tool.
In addition to the tool itself, the SOC.OS Team is building a community of users who want to spend less time sifting through piles of false-positive security alerts and more time dealing with the important stuff. We know your days are already busy with alert triage, network management, high-priority incidents, unneccesarily complex firewall documentation, and many other activities - so we wanted to make getting set up with SOC.OS as easy as possible.
To get to the pages you need, follow the navigation links below, use the search bar above, or browse by page tags.
If you can't find the information you're looking for, you can always get in touch with us at support@socos.io. We'd love to hear from you - the more you tell us what's wrong, the more we can make it right for you and the whole community. 
¶ The SOC.OS Tool
- How it Works What SOC.OS is all about.
- How will SOC.OS Help? How we help you meet your goals.
- MITRE ATT&CK® A universal language for cybersecurity incidents.
- Use Cases Who might use SOC.OS?
- Feedback & Feature Requests Help us, help you.
- Compatible Tools Which security tools do we support? (Spoiler: most of them)
- Release Notes Check out what's new.
- SOC.OS FAQs Questions about SOC.OS.
¶ Onboarding Guide
- Welcome to SOC.OS Start your onboarding journey here.
- Installing the SOC.OS Agent Get ready to forward alerts from on-premise security tools into SOC.OS.
- Integrating Your Tools Hook up on-premise or cloud-based security tools with the SOC.OS platform.
- Onboarding FAQs Questions about getting started with SOC.OS.
¶ User Guide
- What is a Cluster? What is an alert? What is an event log? What is an entity?
- Tutorials Step-by-step guides to getting things done in SOC.OS.
- Support & Training Ask us questions and get better at getting things done in SOC.OS.
- Glossary Key SOC.OS terms, definitions, and links to more information.