27. Sala STIC. Juan Carlos Balderas Cruz, Diseño e implementación de un SOC institucional

This presentation outlines the implementation of an institutional Security Operations Center (SOC) based on open-source tools for detecting and responding to cyber threats. Through a practical case study, it will demonstrate how to correlate events with Wazuh, enrich them with threat intelligence using OpenCTI, and activate automated responses such as blocking malicious IP addresses. The complete workflow from detection to containment will be demonstrated, highlighting how to evolve towards a proactive defense model.