Overview
Product Information on Threat Detection Marketplace
What is Threat Detection Marketplace?
Threat Detection Marketplace Pricing
Threat Detection Marketplace Product Images
Overall experience with Threat Detection Marketplace
“Platform with a large library and strong focus on up-to-date detection content”
About Company
Company Description
SOC Prime is a cybersecurity entity centred on the development of an advanced platform for collective cyber defense. Leveraging the Sigma language and MITRE ATT&CK as integral components, the company emphasizes the enhancement of smart data orchestration, increased attack surface visibility, and cost-effective threat hunting processes. Its innovation is grounded in a zero-trust and multi-cloud methodology. Regardless of recognition and clientele base, SOC Prime's primary goal is to solve core cybersecurity issues and facilitate a transformational shift in the industry.
Company Details
Do You Manage Peer Insights at SOC Prime?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Reviewer Insights for: Threat Detection Marketplace
Threat Detection Marketplace Likes & Dislikes
- Widest coverage observed, both in supported security tools and platforms covered (OS, appliances, cloud platforms, etc.) - New content created very fast to address new threats - Onboarding process and initial setup with the vendor has gone smoothly - They take feedback from customers seriously and improve their product based on that (e.g. license, RBAC controls)
The volume of content
The range and quantity of SIEM rules. The easy to use search functionality. The price is very reasonable.
Note. We were looking for a content provider for Threat Hunting specifically, which typically means analyzing large data & results sets manually. - We deemed the documentation of the content to be lacking. Descriptions are very short. They provide intelligence articles, which are time consuming to review, which are the only documentation providing background to the content. - Typically content doesn't have grouping or other commands to assist in the analysis process, which makes it more challenging for junior hunters to use the content. This is totally fine for detections since only very few or no results are expected. - Free content with slight or no modification provided as premium 3rd party content. Flip side is that the vendor allows us to use the content almost out-of-the-box to save time and reduce errors due manual work. - The sheer amount of content creates a new problem, it's not easy to select which content is relevant to you. Platform does provide filters, but you can still end up having 100s content to choose from.
Ways/Information for testing/emulating detections are not seamlessly part of the product.
Not all SIEM's are supported. I had to manually take the Sigma yaml files and recreate the SIEM rule for my SIEM. To be fair, my SIEM is not well known.
Top Threat Detection Marketplace Alternatives
Peer Discussions
Threat Detection Marketplace Reviews and Ratings
- SENIOR SECURITY MANAGEMENT SPECIALIST50M-1B USDBankingReview Source
Platform with a large library and strong focus on up-to-date detection content
We recently started using the vendor and so far, the experience has been positive. Onboarding went smoothly and support has been responsive. - Director, Detection Engineering10B+ USDMediaReview Source
Leader in Content Volume
For detection and hunting content, this is the most exceptional vendor that I know of, especially with the change in licensing for unlocking detections. As far as product capabilities go, there are opportunities for integrating emulation/validation of detections. I also find threat profiling important (for prioritizing content) and detection lifecycle features (for deprecating stale content) - SOC ManagerGov't/PS/EdGovernmentReview Source
Broadening Your SOC with Additional SIEM Rules and Detection Logic
My SOC requires additional SIEM rules and detection logic. Our SIEM out of the box ruleset was not broad enough to meet our requirements. TDM provides thousands of detections written in Sigma. Some of the content is free and we bought a Subscription to see the premium content. The TDM catalogue uses Mitre ATT&CK for tagging and this made it easier to find the rules we needed for our requirements. Great product to help SOC do their own detection engineering. - IT SECURITY & RISK MANAGEMENT ASSOCIATE10B+ USDBankingReview Source
Excellent Product for SIEM Migration and Threat Hunting
SOC Prime provided exceptional guidance and resources during and after our SIEM migration. - CYBERSECURITY CONTENT MANAGEMENT50M-1B USDHealthcare and BiotechReview Source
If you manage a SIEM you need Soc Prime
We use SOC Prime daily and it is the best resource for SIEM rules