SOC Prime

https://socprime.com/blog/

SOC Prime, Sigma-rule-focused threat-research blog (detection-engineering use case). | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → feed https://socprime.com/blog/feed/ 5 (then webfetch per-post URL for detection guidance/body). AVOID: Nothing to avoid; WordPress feed and per-article WebFetch both work cleanly.. | 2026-07-05 admiralty audit: C, re-reports others' CVE disclosures with added Sigma detection guidance; useful but corroborate before acting. Keep active. | 2026-10-31 (2026-10-31T0256Z-intel health sweep): demoted on the content axis, reliability C to D: the probe verdict is irrelevant and the 20 newest feed items (2026-10-29 to 10-30) are all product how-to and marketing posts (log-export guides, Pre-SIEM Detection pages), with no threat research or Sigma content; no category feed exists. Recover only on a probe that finds security content again.