# Help Center | SOC Prime

> Help Center

## Platform Guides

- [Introduction](https://help.socprime.com/en/articles/6265943-introduction.md)
- [Prime Core Overview](https://help.socprime.com/en/articles/15176338-prime-core-overview.md)
- [Active Threats](https://help.socprime.com/en/articles/10067617-active-threats.md)
- [Overview](https://help.socprime.com/en/articles/6890402-overview.md): Recommended Content | Usage Insights
- [Search](https://help.socprime.com/en/articles/5820444-search.md): Search Types | Applying Search Profiles | Sorting and filtering | Understanding rule details
- [Detection Rule Page](https://help.socprime.com/en/articles/13744779-detection-rule-page.md)
- [Hunt](https://help.socprime.com/en/articles/5820391-hunt.md): Setting up | Hunting
- [Repositories](https://help.socprime.com/en/articles/8517297-repositories.md)
- [Lists](https://help.socprime.com/en/articles/6261400-lists.md): Picking content for automated streaming | Setting up and managing Content Lists
- [Enterprise-Only Content Types](https://help.socprime.com/en/articles/6265507-enterprise-only-content-types.md): Additional content types available under Enterprise
- [Lucene Syntax](https://help.socprime.com/en/articles/6265772-lucene-syntax.md): Learn how to use complex search queries
- [How to export content from a SIEM](https://help.socprime.com/en/articles/9250597-how-to-export-content-from-a-siem.md)
- [Content Import and Bulk Translation](https://help.socprime.com/en/articles/9410961-content-import-and-bulk-translation.md)
- [GitLab CI/CD](https://help.socprime.com/en/articles/10305307-gitlab-ci-cd.md): Sync Custom Repositories with GitLab
- [How to Publish and Share Content](https://help.socprime.com/en/articles/12628081-how-to-publish-and-share-content.md)
- [Supported Platforms](https://help.socprime.com/en/articles/15446765-supported-platforms.md)
- [Automation: Getting Started](https://help.socprime.com/en/articles/6261236-automation-getting-started.md): Automation overview
- [Inventory](https://help.socprime.com/en/articles/6261662-inventory.md): Managing content in Inventory | Updating content
- [History](https://help.socprime.com/en/articles/6261928-history.md): Viewing logs in Automation | Checking deployment results
- [Jobs](https://help.socprime.com/en/articles/6261952-jobs.md): Deploying content via Automation with Jobs | Setting up and managing Jobs
- [Leaderboards](https://help.socprime.com/en/articles/5820449-leaderboards.md): Published content statistics
- [Dashboard](https://help.socprime.com/en/articles/5820372-dashboard.md): Insights on Platform utilization | Downloading Raw Data
- [Log Source Coverage](https://help.socprime.com/en/articles/5820378-log-source-coverage.md): Understanding your content coverage based on log sources
- [MITRE ATT&CK® Coverage](https://help.socprime.com/en/articles/5820381-mitre-att-ck-coverage.md): Understanding your ATT&CK coverage based on utilized content
- [Prime Architect Overview](https://help.socprime.com/en/articles/15116271-prime-architect-overview.md)
- [MCP](https://help.socprime.com/en/articles/16150919-mcp.md)
- [Agentic Threat Research Overview](https://help.socprime.com/en/articles/13335676-agentic-threat-research-overview.md)
- [Projects](https://help.socprime.com/en/articles/14999220-projects.md)
- [Generate Deep Threat Research](https://help.socprime.com/en/articles/14998678-generate-deep-threat-research.md)
- [Generate Attack Flow with AI](https://help.socprime.com/en/articles/13340829-generate-attack-flow-with-ai.md)
- [Generate Behavior Rule with AI](https://help.socprime.com/en/articles/13340878-generate-behavior-rule-with-ai.md)
- [Search Active Threats with AI](https://help.socprime.com/en/articles/13341669-search-active-threats-with-ai.md)
- [Search Detection Rules with AI](https://help.socprime.com/en/articles/13341774-search-detection-rules-with-ai.md)
- [Search in MISP with AI](https://help.socprime.com/en/articles/13335270-search-in-misp-with-ai.md)
- [Generate Short Summary of a Rule/Query/Report with AI](https://help.socprime.com/en/articles/13335778-generate-short-summary-of-a-rule-query-report-with-ai.md)
- [Generate Full Summary of a Rule/Query/Report with AI](https://help.socprime.com/en/articles/13341167-generate-full-summary-of-a-rule-query-report-with-ai.md)
- [Generate Decision Tree of a query/rule with AI](https://help.socprime.com/en/articles/13341060-generate-decision-tree-of-a-query-rule-with-ai.md)
- [Use AIDEFEND MCP](https://help.socprime.com/en/articles/13251275-use-aidefend-mcp.md)
- [How to Generate Behavior Rules and Queries with AI](https://help.socprime.com/en/articles/11679138-how-to-generate-behavior-rules-and-queries-with-ai.md)
- [How to Generate IOC Queries](https://help.socprime.com/en/articles/8106439-how-to-generate-ioc-queries.md)
- [How to Generate a Summary of a Rule/Query/Report with AI](https://help.socprime.com/en/articles/11679269-how-to-generate-a-summary-of-a-rule-query-report-with-ai.md)
- [How to Generate the Decision Tree of a Query/Rule with AI](https://help.socprime.com/en/articles/11679487-how-to-generate-the-decision-tree-of-a-query-rule-with-ai.md)
- [How to Generate Attack Flow with AI](https://help.socprime.com/en/articles/11679687-how-to-generate-attack-flow-with-ai.md)
- [How to Add ATT&CK Tags to a Sigma Rule with AI](https://help.socprime.com/en/articles/11679792-how-to-add-att-ck-tags-to-a-sigma-rule-with-ai.md)
- [How to Use a Custom Prompt to Perform Custom AI Tasks](https://help.socprime.com/en/articles/11679810-how-to-use-a-custom-prompt-to-perform-custom-ai-tasks.md)
- [How to Translate Detection Content](https://help.socprime.com/en/articles/8106436-how-to-translate-detection-content.md)
- [How to Validate Query Syntax and Structure with AI](https://help.socprime.com/en/articles/11679873-how-to-validate-query-syntax-and-structure-with-ai.md)
- [How to Optimize a Query with AI](https://help.socprime.com/en/articles/11679896-how-to-optimize-a-query-with-ai.md)
- [How to Aggregate Query Results with AI](https://help.socprime.com/en/articles/11679908-how-to-aggregate-query-results-with-ai.md)
- [How to Explore Prime Core Content](https://help.socprime.com/en/articles/8106414-how-to-explore-prime-core-content.md)
- [How to Write Sigma Rules](https://help.socprime.com/en/articles/8106398-how-to-write-sigma-rules.md): Write Sigma rules | IDE for detection engineering | Green Warden | Save Rules
- [How to Avoid Frequent Sigma Mistakes](https://help.socprime.com/en/articles/8106469-how-to-avoid-frequent-sigma-mistakes.md)
- [How to Use OpenTide Integration](https://help.socprime.com/en/articles/11680390-how-to-use-opentide-integration.md)
- [Prime Hunt Overview](https://help.socprime.com/en/articles/13915519-prime-hunt-overview.md)
- [Supported Platforms](https://help.socprime.com/en/articles/13915551-supported-platforms.md)
- [Setup Requirements and Recommendations](https://help.socprime.com/en/articles/13915738-setup-requirements-and-recommendations.md)
- [Configure and Run Data Audit](https://help.socprime.com/en/articles/13915786-configure-and-run-data-audit.md)
- [View Data Audit Results](https://help.socprime.com/en/articles/13915881-view-data-audit-results.md)
- [Configure and Run Scan](https://help.socprime.com/en/articles/13916078-configure-and-run-scan.md)
- [View Scan Results](https://help.socprime.com/en/articles/13916411-view-scan-results.md)
- [Configure and Run Content Audit](https://help.socprime.com/en/articles/13916673-configure-and-run-content-audit.md)
- [View Content Audit Results](https://help.socprime.com/en/articles/13916722-view-content-audit-results.md)
- [Track and Manage Audits and Scans](https://help.socprime.com/en/articles/13916760-track-and-manage-audits-and-scans.md)
- [Attack Chains](https://help.socprime.com/en/articles/16162581-attack-chains.md)
- [LogTotal](https://help.socprime.com/en/articles/16819619-logtotal.md)
- [Prime Detect Requirements and Deployment Guide](https://help.socprime.com/en/articles/16016890-prime-detect-requirements-and-deployment-guide.md)
- [Prime Detect Deployment Guide Minikube](https://help.socprime.com/en/articles/16845614-prime-detect-deployment-guide-minikube.md)
- [Initial Setup](https://help.socprime.com/en/articles/16003262-initial-setup.md)
- [Account Information](https://help.socprime.com/en/articles/16003328-account-information.md)
- [Dashboard](https://help.socprime.com/en/articles/16003336-dashboard.md)
- [Pipelines](https://help.socprime.com/en/articles/16003355-pipelines.md)
- [Repositories and Rules](https://help.socprime.com/en/articles/16003578-repositories-and-rules.md)
- [Attack Chains](https://help.socprime.com/en/articles/16012801-attack-chains.md)
- [Topics](https://help.socprime.com/en/articles/16012878-topics.md)
- [Log Sources](https://help.socprime.com/en/articles/16012887-log-sources.md)
- [Integrations](https://help.socprime.com/en/articles/16013040-integrations.md)
- [Filters](https://help.socprime.com/en/articles/16013114-filters.md)
- [User Management](https://help.socprime.com/en/articles/16013311-user-management.md)
- [Audit Logs](https://help.socprime.com/en/articles/16013998-audit-logs.md)
- [System Status](https://help.socprime.com/en/articles/16014005-system-status.md)
- [Pipeline Runtime](https://help.socprime.com/en/articles/16014129-pipeline-runtime.md)
- [Account](https://help.socprime.com/en/articles/6259852-account.md): Providing personal and work information
- [Subscriptions](https://help.socprime.com/en/articles/8047400-subscriptions.md): Manage your subscriptions to the SOC Prime Platform products
- [Account Security](https://help.socprime.com/en/articles/6259855-account-security.md): Changing password | 2-factor authentication | Recovery codes
- [Email Notifications](https://help.socprime.com/en/articles/6259860-email-notifications.md): Setting up notifications about new and updated content
- [Role and Platform](https://help.socprime.com/en/articles/6259871-role-and-platform.md): Setting up professional role and security platform
- [Invite Your Team](https://help.socprime.com/en/articles/6259875-invite-your-team.md)
- [Tenants](https://help.socprime.com/en/articles/8575213-tenants.md)
- [Team Management and Roles](https://help.socprime.com/en/articles/9744030-team-management-and-roles.md): RBAC | Manage permissions
- [Data Planes](https://help.socprime.com/en/articles/6261097-data-planes.md): Setting up and managing integrations with your Data Planes
- [Integrations](https://help.socprime.com/en/articles/8517408-integrations.md)
- [Custom Field Mapping](https://help.socprime.com/en/articles/6261215-custom-field-mapping.md): Creating and managing profiles to customize rules' code for your data schema
- [Filters](https://help.socprime.com/en/articles/6262024-filters.md): Adding extra conditions to code before deployment with Filters | Setting up and managing Filters
- [Presets](https://help.socprime.com/en/articles/6261991-presets.md): Customizing content settings before deployment with Presets | Setting up and managing Presets
- [Search Profiles](https://help.socprime.com/en/articles/6261210-search-profiles.md): Setting up and managing profiles to simplify search
- [API](https://help.socprime.com/en/articles/6265791-api.md)
- [MCP Tokens](https://help.socprime.com/en/articles/13652533-mcp-tokens.md)
- [MCP Server](https://help.socprime.com/en/articles/13646042-mcp-server.md)
- [SSO Configuration](https://help.socprime.com/en/articles/8754081-sso-configuration.md): Single Sign-On | SSO | SAML 2.0 | Okta | Azure AD

## FAQs

- [How to Get Credentials for Coralogix Data Plane](https://help.socprime.com/en/articles/12165535-how-to-get-credentials-for-coralogix-data-plane.md)
- [How to use Promo Codes on SOC Prime Platform](https://help.socprime.com/en/articles/6078851-how-to-use-promo-codes-on-soc-prime-platform.md)
- [On Demand Subscriptions FAQ](https://help.socprime.com/en/articles/6144956-on-demand-subscriptions-faq.md)
- [Set Your Email Notifications on SOC Prime](https://help.socprime.com/en/articles/6231954-set-your-email-notifications-on-soc-prime.md): A guide on how to personalise email notifications you get from SOC Prime.
- [Using Automation with Splunk](https://help.socprime.com/en/articles/6440785-using-automation-with-splunk.md)
- [How to change your email](https://help.socprime.com/en/articles/6788496-how-to-change-your-email.md)
- [Using Prime Hunt with On-Prem Splunk](https://help.socprime.com/en/articles/8146081-using-prime-hunt-with-on-prem-splunk.md)
- [Using Prime Hunt with On-Prem IBM QRadar](https://help.socprime.com/en/articles/8439517-using-prime-hunt-with-on-prem-ibm-qradar.md)
- [Using Prime Hunt with On-Prem Elastic](https://help.socprime.com/en/articles/8439545-using-prime-hunt-with-on-prem-elastic.md)
- [How to Apply Microsoft Windows queries for Splunk to Sysmon](https://help.socprime.com/en/articles/10125248-how-to-apply-microsoft-windows-queries-for-splunk-to-sysmon.md): Prime Hunt | Custom Field Mapping | Splunk | Windows to Sysmon
- [How to Get Credentials for Google SecOps](https://help.socprime.com/en/articles/12530767-how-to-get-credentials-for-google-secops.md)
- [How to Get Credentials for Google SecOps and Set up WIF](https://help.socprime.com/en/articles/14301615-how-to-get-credentials-for-google-secops-and-set-up-wif.md)
- [Microsoft Sentinel Credentials - Data Plane for Automation or Prime Hunt](https://help.socprime.com/en/articles/7136486-microsoft-sentinel-credentials-data-plane-for-automation-or-prime-hunt.md): Use in Prime Hunt or in Automation \(ex Continuous Content Management\) and for direct deployment from a Sigma rule page
- [Microsoft Sentinel Credentials - Data Plane for Hunting](https://help.socprime.com/en/articles/7238947-microsoft-sentinel-credentials-data-plane-for-hunting.md): Use in Quick Hunt and direct search from a Sigma rule page
- [Pre-requisites, Permissions, and Credentials for Using Prime Hunt with Amazon Athena](https://help.socprime.com/en/articles/7238518-pre-requisites-permissions-and-credentials-for-using-prime-hunt-with-amazon-athena.md): v.3.1
- [How to Grant Permissions for Prime Hunt in OpenSearch](https://help.socprime.com/en/articles/8136030-how-to-grant-permissions-for-prime-hunt-in-opensearch.md)
- [How to Get Credentials for Sumo Logic Data Plane](https://help.socprime.com/en/articles/8160044-how-to-get-credentials-for-sumo-logic-data-plane.md)

## Release Notes

- [SOC Prime Platform Product Release Notes 6.3.1](https://help.socprime.com/en/articles/16627102-soc-prime-platform-product-release-notes-6-3-1.md)
- [Prime Detect Release Notes 2.2.0](https://help.socprime.com/en/articles/16615284-prime-detect-release-notes-2-2-0.md)
- [SOC Prime Platform Product Release Notes 6.3.0](https://help.socprime.com/en/articles/16201927-soc-prime-platform-product-release-notes-6-3-0.md)
- [DetectFlow Release Notes 2.1](https://help.socprime.com/en/articles/16011813-detectflow-release-notes-2-1.md)
- [SOC Prime Platform Product Release Notes 6.2.3](https://help.socprime.com/en/articles/15972594-soc-prime-platform-product-release-notes-6-2-3.md)
- [SOC Prime Platform Product Release Notes 6.2.2](https://help.socprime.com/en/articles/15847589-soc-prime-platform-product-release-notes-6-2-2.md)
- [SOC Prime Platform Product Release Notes 6.2.1](https://help.socprime.com/en/articles/15602469-soc-prime-platform-product-release-notes-6-2-1.md)
- [SOC Prime Platform Product Release Notes 6.2.0](https://help.socprime.com/en/articles/15165225-soc-prime-platform-product-release-notes-6-2-0.md)
- [SOC Prime Platform Product Release Notes 6.1.8](https://help.socprime.com/en/articles/14623955-soc-prime-platform-product-release-notes-6-1-8.md)
- [SOC Prime Platform Product Release Notes 6.1.7](https://help.socprime.com/en/articles/14192811-soc-prime-platform-product-release-notes-6-1-7.md)
- [SOC Prime Platform Product Release Notes 6.1.6](https://help.socprime.com/en/articles/13869768-soc-prime-platform-product-release-notes-6-1-6.md)
- [SOC Prime Platform Product Release Notes 6.1.5](https://help.socprime.com/en/articles/13684043-soc-prime-platform-product-release-notes-6-1-5.md)
- [SOC Prime Platform Product Release Notes 6.1.4](https://help.socprime.com/en/articles/13451193-soc-prime-platform-product-release-notes-6-1-4.md)
- [SOC Prime Platform Product Release Notes 5.16.4](https://help.socprime.com/en/articles/11947987-soc-prime-platform-product-release-notes-5-16-4.md)

## How To Deploy Content

- [Office 365 Rule Pack](https://help.socprime.com/en/articles/5111290-office-365-rule-pack.md): Dashboards Deployment for Security Monitoring Based on the Elastic Stack
- [Elastic Stack ECS Template](https://help.socprime.com/en/articles/5118690-elastic-stack-ecs-template.md): How to install the Elastic Common Schema \(ECS\) index template from SOC Prime Platform
- [Detecting Network Spikes Identified by WAF for the Elastic Stack Platform](https://help.socprime.com/en/articles/5118695-detecting-network-spikes-identified-by-waf-for-the-elastic-stack-platform.md): This guide describes detecting abnormal spikes of attacks identified by WAF from a single IP to a single web application
- [Obfuscated Command-Line Detection Using Splunk Search](https://help.socprime.com/en/articles/5119836-obfuscated-command-line-detection-using-splunk-search.md): How to use SOC Prime Platform content for detection of obfuscated Windows command-line invocations on endpoints
- [Deploying SOC Prime's SSL Framework for Splunk](https://help.socprime.com/en/articles/5119845-deploying-soc-prime-s-ssl-framework-for-splunk.md): How to deploy the SSL Framework Content Pack from the SOC Prime Platform into your Splunk instance
- [Sysmon Rules Guide](https://help.socprime.com/en/articles/5119858-sysmon-rules-guide.md): Sysmon is a free tool designed to extend the current logging in Windows to aid in understanding and detecting attackers by behavior.