A working directory of SOC tooling — what I run in production, and what I have taken apart to find out whether it earns a place. Grouped by what it costs you, because that is the first question anyone building a SOC actually has to answer. Every entry links straight to the vendor.
This directory is only as good as what is in it. If a tool earns its place and is not here, say so — and say why.