{
  "schema_version": "1.1",
  "id": "archive:https://github.com/beenuar/AiSOC",
  "slug": "aisoc-09m5iqd",
  "url": "https://feed7.dev/p/aisoc-09m5iqd",
  "title": "beenuar/AiSOC",
  "why_included": "AiSOC shows how a security agent can investigate alerts through typed tools, record its steps in an auditable ledger, and require human approval before response actions. Its shipped local model is useful for trying the flow without API keys.",
  "summary": "AiSOC ingests security events, runs detection and correlation, then sends incidents to an agent that uses typed tools and records prompts, calls, citations, and verdicts in an **Investigation Ledger**. The project lists **87 connectors** and ships with a local **Llama 3.2 3B** model; response playbooks default to preview.",
  "practical_implication": "",
  "agent_context": "AiSOC ingests security events, runs detection and correlation, then sends incidents to an agent that uses typed tools and records prompts, calls, citations, and verdicts in an **Investigation Ledger**. The project lists **87 connectors** and ships with a local **Llama 3.2 3B** model; response playbooks default to preview.",
  "source": {
    "name": "GitHub",
    "url": "https://github.com/beenuar/AiSOC",
    "published_at": null
  },
  "source_class": "tool",
  "content_type": "GitHub Repo",
  "layer": "agent",
  "domains": [
    "security"
  ],
  "topics": [
    "harness-engineering",
    "tool-use",
    "agent-reliability"
  ],
  "verification": {
    "status": "needs_review",
    "label": "Needs Review",
    "method": "unverified",
    "verified_at": null
  },
  "uncertainty": [],
  "connected_context": {
    "meaning": "AiSOC applies an agent harness to security investigations: typed tools, a recorded investigation ledger, and preview-first playbooks make tool use and findings inspectable. Its local model and connector breadth show a packaged implementation, while the supplied brief does not establish detection quality or operational reliability. The ledger and preview defaults address auditability and review, but do not alone settle authorization or uncertain outcomes from external actions.",
    "corpus_size": 969,
    "generated_at": "2026-11-01T11:02:58.263Z",
    "connections": [
      {
        "title": "From coding to Knowledge work agents — Karan Vaidya, Composio",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=xxfMT-bPEmU",
        "feed7_url": "https://feed7.dev/p/from-coding-to-knowledge-work-agents-karan-vaidya-composio-14b5s5w",
        "reason": "The knowledge-work harness principles of action records, permissions, and preflight checks align with AiSOC's ledger and preview-first playbooks, grounding them in a security investigation workflow."
      },
      {
        "title": "SENTINEL-RL: Offloading Topological Reasoning from LLM Agents in the Security Operations Center",
        "source_name": "arXiv",
        "source_url": "https://arxiv.org/abs/2609.04159v1",
        "feed7_url": "https://feed7.dev/p/2609-04159v1-1ehxiz5",
        "reason": "Sentinel-RL describes a more constrained SOC action architecture with external topology reasoning and human approval; it offers a contrast to AiSOC's agent-centered investigation flow without evidence here that either is superior."
      },
      {
        "title": "AI Agents Are Just Distributed Systems Now — Salman Munaf, TikTok",
        "source_name": "AI Engineer",
        "source_url": "https://www.youtube.com/watch?v=hD9-V56FNRI",
        "feed7_url": "https://feed7.dev/p/ai-agents-are-just-distributed-systems-now-salman-munaf-tiktok-1v4yc47",
        "reason": "The distributed-systems discussion highlights that logs do not resolve ambiguous tool outcomes; it adds a recovery and idempotency concern beyond AiSOC's recorded calls and verdicts."
      }
    ]
  },
  "lifecycle": "Current",
  "published_at": null,
  "modified_at": null,
  "supersedes": [],
  "expires_at": null,
  "formats": {
    "html": "https://feed7.dev/p/aisoc-09m5iqd",
    "json": "https://feed7.dev/p/aisoc-09m5iqd.json",
    "markdown": "https://feed7.dev/p/aisoc-09m5iqd.md"
  }
}