VR0502/Cybersecurity-SOC-env

SOC Security Environment for OpenEnv

Concept

Simulates a Tier-1 SOC analyst triaging security alerts.

Observation Space

Dictionary: id, srcIP, typ, sev, ts

Action Space

0=ALLOW, 1=INVESTIGATE, 2=ISOLATEHOST, 3=BLOCKIP, 4=REVOKE_CREDENTIALS

Tasks (easy → hard)

• —Task1: phishing (action 1)
• —Task2: brute force (action 3)
• —Task3: malware (action 2)

Setup

See GitHub repo for details.