Applying Security Orchestration, Automation & Response (SOAR) to security threat hunting with Duke’s ITSO

We utilize elements of data science and analysis in order to scour weblogs for potential malicious attacks on Duke’s servers. Additionally, we seek to identify patterns within the data that could be indicative of malicious intent and hope to apply these to real-time data.