SOC Prime launches LogTotal: rule-first log analysis with AI interpretation at the end
cyb3rops · x · 2026-10-18
SOC Prime has launched LogTotal, an affordable online service for automating log file investigation: upload logs, match them against 1.1M+ behavioral detection rules, correlate hits into attack chains, detect outliers, and generate AI-written incident reports.
The architecture is notable: instead of dumping millions of log events into an LLM, it runs detection rules and correlation first, using AI only later to investigate and explain findings.
Privacy-wise, sensitive identifiers can be pseudonymized locally before upload — the open-source Sanitizer ships with a CLI that runs fully offline, so users can inspect the code and sanitize logs in their own environment.
More from coding & agent
- Model-agnostic harnesses will never get the most out of a model — gethackteam · 2026-10-18
- Google open-sources Harness²: recursive agent harnessing lifts GLM-5 and Gemini 3.5 Flash by up to 11.8 points — dr_cintas · 2026-10-18
- exe.dev ships API/CLI explorer for its 1-second VM platform — davidcrawshaw · 2026-10-18
- Using Codex to Reorganize a Google TV: Coding Agents in Unexpected Places — brandon_galang · 2026-10-18
- Monorepos went from 'suck' to 'awesome' because AI can navigate them — gethackteam · 2026-10-18
- Non-programmer on coding agents: 'I've never written code, I just trust the process' — flowersslop · 2026-10-18