SOC Prime Platform

SOC Prime has proved to be a very useful purchase for our content development team over the past year. Prime Core always has up-to-date content for the latest attack tactic and techniques. Prime Core has also enabled our organization to map our detections to the MITRE ATT&CK framework. Prime Core has also saved our content development team many hours of work.

We have been using Prime Core for 2 years. The company provides a great service, qualified support and personal approach. Before choosing Prime Core, we were actually looking for a solution to cover our security content needs and improve detection capabilities. Prime Core has covered these needs and moreover saved time to our SOC team. For the past year they became even better and more mature in content quality and quantity. I think they can improve even more by adding some industry specific content, but still it's a good value for money anyway.

The company has very knowledgable staff and the Prime Core platform provides a plethora of great threat definitions and IOCs. I think SOC prime could do better from a QA standpoint as many of the rules don't work out of the box and require some fine tuning.

Aiming to gain the maximum of the Information Security department, the Bank reached out to SOC Prime for consulting and finally bought a subscription for the SOC Prime Platform for sharing analytical content. The subscription enabled us to significantly decrease workload of the department employees for creating the analytical content, and put their efforts into investigation of the detected incidents. New valid use cases and detection queries are continuously added to Prime Core, which gives us an opportunity to minimize time for detection and mitigation of threats.

Experience with Prime Core has been good so far. It is helping us improve our monitoring and detection capabilities by providing already built use cases that would take time for our internal team to develop.

We bought SOC Prime as we were struggling to maintain our rule sets which putting our company at risk. Since subscribing to the SOC Prime Platform we are able to continuously update our security content without increasing resources. SOC Prime is now a critical part of our security infrastructure and increasing the venue from existing SIEM investments.

Good Product and Services, SOC Prime Threat Detection Management always has up-to-date content for the latest attack tactic and techniques which is useful for all our customers for detect, prevent and analysis.

SOC Prime have worked with us to ensure we are making as much use of the Prime Core platform as possible. They have taken multiple feature requests and added them into their development pipeline.

A solution service that made a Security operations live easier, buy the time investing and knowledge and focus more on the operations and service improvements, and waste les time.

Prime Core is really easy to use. I like the filtration of content, it's really easy to find what's needed from the dozens of rules. What is more helpful for us in day-to-day work - mapping to the MITRE ATT&CK framework that halps in uncovering the latest threats.

At organisation, we are in the process of migrating from one SIEM technology to another one. This was an opportunity to review the use case library and to develop them following well-known framework such as MITRE ATT&CK. Using SOC Prime Platform helps to quickly identify use cases related to the technologies to monitor and the tactics, techniques and procedures of the attackers. Prime Core helps us to make more effective security monitoring rules, to port them to the new platform and eventually to reduce the time to prod of the use cases.

The content is very good and regularly updated and really effective in detecting advanced threats, it become a crucial part of our day to day operations