Sigma Rules Bot for Threat Bounty
Create, verify, and get your Sigma rules published to SOC Prime’s Detection as Code platform via Slack! Submit new detections, improve them on the fly with the smart suggestions of the automagic Sigma tests, get the rules verified by leading detection engineering experts, and monetize your contribution to the global cyber defense with the SOC Prime Platform. • Create Sigma rules directly in Slack.
• Improve your rules based on the smart suggestions of the automated Sigma check.
• Submit your Sigma rules to review by the best engineering experts of the SOC Prime Team.
• Discuss possible improvements to your detection on review with the SOC Prime Team representative in a dedicated thread.
• Add updates to edits to your Sigma rules which are already published to the SOC Prime’s Detection as Code PlatformHere are some details to bear in mind about using the Sigma Rules Bot for Threat Bounty as a content author: • You need to have an activated account with the SOC Prime Threat Bounty Program.
• You should only use your Threat Bounty Program email to authenticate with the Threat Bounty Bot.
• You cannot save content drafts and delete your previously published content via Threat Bounty Bot.
• Improve your rules based on the smart suggestions of the automated Sigma check.
• Submit your Sigma rules to review by the best engineering experts of the SOC Prime Team.
• Discuss possible improvements to your detection on review with the SOC Prime Team representative in a dedicated thread.
• Add updates to edits to your Sigma rules which are already published to the SOC Prime’s Detection as Code PlatformHere are some details to bear in mind about using the Sigma Rules Bot for Threat Bounty as a content author: • You need to have an activated account with the SOC Prime Threat Bounty Program.
• You should only use your Threat Bounty Program email to authenticate with the Threat Bounty Bot.
• You cannot save content drafts and delete your previously published content via Threat Bounty Bot.
Permissions
Sigma Rules Bot for Threat Bounty will be able to view:
Sigma Rules Bot for Threat Bounty will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
SOC Prime, Inc.
Company headquarters location
United States
Privacy & data governance
Data retention policy
SOC Prime will retain Customer Data in accordance with our Privacy Policy https://developer.socprime.com/home/privacy-policy/
The basic identity information such as first name, last name, email address, company, country passwords/credentials, tracking/analytics data, and user device information such as IP address, cookies, and geolocation information.
It is stored so as to identify the specific users whenever they log in/sign in to our service. (please see the 2.1. clause of our Privacy Policy)
Data archiving and removal policy
SOC Prime will remove Customer Data in accordance with our Privacy Policy https://developer.socprime.com/home/privacy-policy/
Both the basic identity information and the web data will be deleted either upon the concerned user’s request or on the set time limit, i.e., 5 years once.
What will be done with the data that is no longer required?
In compliance with General Data Protection Regulation (GDPR), we delete the data that is classified as no longer required every 5 years. Apart from this set time limit, the data will be deleted whenever and however required if the concerned user wants us to. (clause 6)
Data storage policy
SOC Prime will store Customer Data in accordance with our Privacy Policy https://developer.socprime.com/home/privacy-policy/
At SOC Prime, we respect and are committed to protecting our users’ information. For us, data security is a no-compromise factor, which in turn forces us to constantly ensure that all measures are taken to avoid any data leakage and security breaches. Basic identity and web data will be stored on our secure cloud servers in the AWS Europe data center in Frankfurt.
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
Data deletion request procedure
Once received, the subject access request (SAR) application is immediately forwarded to the Data Protection Officer. In case of doubts in the identification of the data subject, SOC Prime may request to fill out the Subject Access Request Form and provide SOC Prime with evidence of their identity.
SOC Prime provides the requested information to the data subject within one month from the request recorded date. Data Protection Officer will ensure that the requested data is deleted and the response is given within the specified time frame above.
Collecting the data requested for deletion or specified by the data subject, include: searching all databases and all relevant filing systems (manual files) in SOC Prime, including all backup and archived files and all email folders and archives.
Where the data subject makes the request by electronic form means, the information will be provided by electronic means where possible, unless otherwise requested by the data subject.
SOC Prime removes personal data from systems and processing operations as soon as a request for erasure has been submitted by the data subject.
SOC Prime contacts other organizations, where the personal data of the data subject is being processed, to cease processing information at the request of the data subject.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack App Directory, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2022-06-15
Executive summary is available to potential customers upon request
no
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
security@socrime.com
Has a vulnerability disclosure program
no
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no