Security · SOC Operations
Casewire SOC
Casewire SOC is a Security Operations Center case-management workspace. Security events are only useful when grouped by explainable rules and carried through an investigation. Casewire demonstrates that path end to end: event, alert, incident case, and response.
Features
- Normalized event intake persisted in PostgreSQL
- Deterministic brute-force rule: three or more failed logins from one source IP within five minutes
- Alert-to-case triage with status, severity and owner tracking
- Analyst notes, response tasks and a case timeline
- React dashboard for working cases
Technologies
Java 21Spring BootSpring Data JPAPostgreSQLReact 19TypeScriptViteTailwind CSSJUnit 5