SOAR Automation
Forge
From Telemetry to Containment.
Runs logic-based playbooks to quarantine instances, revoke credentials, and block anomalous networks automatically at machine speeds.
Key Capabilities
✓Logic-based visual containment workflows
✓One-click AWS IAM credentials revocation
✓EC2 VPC subnet isolation playbooks
✓Webhook and Slack dispatch triggers
✓Incident containment SLA dashboard
AWS Anomaly Containment Playbook
[Trigger] Confidence > 0.85
1. Revoke IAM Credentials session
2. Quarantining Source EC2 instance
3. Dispatch Slack notification card
Module Configuration
Technical Specifications
Trigger Latency<300ms from alert validation
API HooksAWS Lambda, GCP Cloud Run, Webhooks
FormatYAML/JSON playbook configurations
Audit TrailImmutable Forge history records