Full-cycle SOC — alert triage in TheHive, automated analysis via Cortex 100+ analyzers, MISP threat sharing, OpenCTI intelligence graph, and Caldera adversary simulation. All mapped to MITRE ATT&CK.
Each SOC component contributes coverage across ATT&CK tactics. Caldera simulates adversary ops to validate detection effectiveness.