soc-respond

Overview ¶

Package main provides the SOC Respond process (SEC-001 Process Isolation).

Responsibility: Receives incidents from soc-correlate via IPC, executes playbooks, dispatches webhooks, writes audit log.

Network access: restricted to outbound HTTPS (webhook endpoints only).

Usage:

go run ./cmd/soc-respond/