Welcome to AiSOC — start here #350

Hi 👋 — welcome to AiSOC.

AiSOC is an open-source, self-hostable AI SOC. The agent's prompts, tool calls, and rationale are logged step-by-step and replayable. MIT-licensed.

Where to start

1. Just want to see it run?

   • Live demo (community-maintained): https://tryaisoc.com
   • One-click in your browser via GitHub Codespaces — click the green Code button → Codespaces → Create codespace on main. Wait for pnpm aisoc:demo to seed the LockBit 3.0 case and open the Investigation Ledger.
   • One-shot local demo: git clone https://github.com/beenuar/AiSOC && cd AiSOC && pnpm aisoc:demo (≈3.5 min on a warm Docker daemon).

2. Want to deploy AiSOC for real?

   • Render — one-click button in the README
   • Fly.io / Render / Railway / Coolify / Kubernetes / Terraform — see Deployment options in the README

3. Want to read the docs?

   • https://tryaisoc.com/docs (Docusaurus site, mirror of apps/docs/)
   • In-repo: apps/docs/docs/quickstart.md and apps/docs/docs/intro.md

4. Want to contribute?

   • First-time contributors: pick a good first issue
   • New connector? See apps/docs/docs/connectors/
   • New Sigma detection? Drop it under detections/ — the validate-detections workflow tests it on every PR.
   • Full contributor guide: CONTRIBUTING.md

House rules

• Ask product questions in Q&A (the only category where answers can be marked accepted).
• Show off your AiSOC deployment, custom detections, or plugins in Show and tell.
• Drop feature requests in Ideas.
• For security issues, do not open a public issue or discussion — use GitHub Security Advisories instead.

Glad to have you. Happy hunting 🛡️