Solar JSOC

Solar SIEM 2026.2 Adds Full Solar JSOC Detection Library, TI Feeds Support, Enhanced AI Agent and Multi-Tenancy

GC Solar has released Solar SIEM 2026.2, which now includes the complete detection rule library developed by Solar JSOC over 14 years of monitoring approximately 300 customer infrastructures. The update eliminates the need for organizations to spend months building custom rule sets by providing ready-made detection scenarios that identify sophisticated attacks from the earliest implementation stages. In 2025, Solar JSOC recorded 1.16 million security events after false-positive filtering and confirmed more than 33,000 incidents, with malware accounting for 36 percent and unauthorized access attempts for 23 percent. The product also gained native support for TI Feeds, allowing automatic ingestion and correlation of indicators of compromise from Solar 4RAYS and customer-owned sources. The built-in AI agent has been significantly expanded so it can now independently query raw event data, perform deeper analysis, and recommend next steps, reducing manual workload for analysts. Multi-tenancy capabilities enable multiple organizations to share a single SIEM instance while keeping their event streams fully separated, targeting holdings, MSSP providers, and large enterprises with numerous divisions. More than 40 companies of various sizes participated in the pilot program.