Issues

Add search histograms and field summary charts

jusso-dev/Tawny-SOC#36 · opened

on May 31, 2026

Add scheduled analysis prompts

jusso-dev/Tawny-SOC#35 · opened

on May 31, 2026

Add schema inference and parser test workbench

jusso-dev/Tawny-SOC#34 · opened

on May 31, 2026

Add custom lookup enrichment tables

jusso-dev/Tawny-SOC#33 · opened

on May 31, 2026

Extract canonical indicator fields during ingestion

jusso-dev/Tawny-SOC#32 · opened

on May 31, 2026

Expand correlation rules with sequence, group, and absence logic

jusso-dev/Tawny-SOC#31 · opened

on May 31, 2026

Add alert grouping, deduplication, and storm limiting

jusso-dev/Tawny-SOC#30 · opened

on May 31, 2026

Formalize signals as first-class records separate from alerts

jusso-dev/Tawny-SOC#29 · opened

on May 31, 2026

Add structured detection runbooks

jusso-dev/Tawny-SOC#28 · opened

on May 31, 2026

1

Draft detection rules from alerts or hunt results

jusso-dev/Tawny-SOC#27 · opened

on May 31, 2026

Summarize hunt results with cited records

jusso-dev/Tawny-SOC#26 · opened

on May 31, 2026

Add natural-language query drafting for YAAQL

jusso-dev/Tawny-SOC#25 · opened

on May 31, 2026

Create a permission-scoped SOC assistant tool layer

jusso-dev/Tawny-SOC#24 · opened

on May 31, 2026

Persist AI triage runs with evidence citations

jusso-dev/Tawny-SOC#23 · opened

on May 31, 2026

[Follow-up][SIEM Baseline] Add compliance exports, scheduled reports, and full audit coverage

jusso-dev/Tawny-SOC#22 · opened

on May 29, 2026

[Follow-up][SIEM Baseline] Implement production connector sync adapters and checkpoints

jusso-dev/Tawny-SOC#21 · opened

on May 29, 2026

[SIEM Baseline] Add security data lake architecture option and storage/search separation plan

jusso-dev/Tawny-SOC#20 · opened

on May 29, 2026

[SIEM Baseline] Validate multi-tenant architecture for MSSP and enterprise delegation

jusso-dev/Tawny-SOC#19 · opened

on May 29, 2026

[SIEM Baseline] Productionize AI-assisted investigation and natural-language detection engineering

jusso-dev/Tawny-SOC#18 · opened

on May 29, 2026

[SIEM Baseline] Add digital forensics support, artifact preservation, replay, and investigation exports

jusso-dev/Tawny-SOC#17 · opened

on May 29, 2026

[SIEM Baseline] Add entity graph, attack graph, and relationship visualization

jusso-dev/Tawny-SOC#16 · opened

on May 29, 2026

[SIEM Baseline] Add asset inventory, vulnerability context, and exposure-aware prioritization

jusso-dev/Tawny-SOC#15 · opened

on May 29, 2026

[SIEM Baseline] Expand threat hunting workbench with collaboration, ATT&CK coverage, and saved hunt lifecycle

jusso-dev/Tawny-SOC#14 · opened

on May 29, 2026

[SIEM Baseline] Build native SOAR action execution framework and response approvals

jusso-dev/Tawny-SOC#13 · opened

on May 29, 2026

[SIEM Baseline] Add UEBA entity baselining, anomaly detection, and risk scoring

jusso-dev/Tawny-SOC#12 · opened

on May 29, 2026

1

Navigation Menu

Repository navigation

Issues

Add search histograms and field summary charts

Add scheduled analysis prompts

Add schema inference and parser test workbench

Add custom lookup enrichment tables

Extract canonical indicator fields during ingestion

Expand correlation rules with sequence, group, and absence logic

Add alert grouping, deduplication, and storm limiting

Formalize signals as first-class records separate from alerts

Add structured detection runbooks

Draft detection rules from alerts or hunt results

Summarize hunt results with cited records

Add natural-language query drafting for YAAQL

Create a permission-scoped SOC assistant tool layer

Persist AI triage runs with evidence citations

[Follow-up][SIEM Baseline] Add compliance exports, scheduled reports, and full audit coverage

[Follow-up][SIEM Baseline] Implement production connector sync adapters and checkpoints

[SIEM Baseline] Add security data lake architecture option and storage/search separation plan

[SIEM Baseline] Validate multi-tenant architecture for MSSP and enterprise delegation

[SIEM Baseline] Productionize AI-assisted investigation and natural-language detection engineering

[SIEM Baseline] Add digital forensics support, artifact preservation, replay, and investigation exports

[SIEM Baseline] Add entity graph, attack graph, and relationship visualization

[SIEM Baseline] Add asset inventory, vulnerability context, and exposure-aware prioritization

[SIEM Baseline] Expand threat hunting workbench with collaboration, ATT&CK coverage, and saved hunt lifecycle

[SIEM Baseline] Build native SOAR action execution framework and response approvals

[SIEM Baseline] Add UEBA entity baselining, anomaly detection, and risk scoring