An example of managed SOC and MDR as a governed process: agents do the 6 steps, and a person signs the gate before anything irreversible happens. Download it, import it into your workspace, and adapt it to your systems.
minctrl.process/v1 · hash 640642216f4d…dfed
Tier-1/2 alert triage is endless, repetitive and alert-fatigued — yet a missed signal is a breach and a wrong containment takes production down. Every alert is enriched, correlated and investigated autonomously with a written verdict; only real incidents and containment decisions reach a certified analyst, who authorizes the response.
A minctrl.process/v1 document: the graph and the hash of the process it becomes.
Import into Minctrl opens this example in your workspace; one click stores it as your first version. Import JSON does the same with the file, and a file changed after download is refused.
Every connector starts in shadow: steps run, nothing leaves Minctrl until you configure a connector and switch it live.
Change signers, time limits and steps on the canvas. Each save is a new version; a running case stays on the version it started with.
Start from this example. Import the file in Processes, connect your own systems, and adapt the steps on the canvas. Agents run the reversible steps; every irreversible step waits at a gate for the role you choose. The example has 6 steps and 1 gate; you can change any of them.
Every run start, signature and change to the process is written to a hash-chained audit log your auditor can verify and export. The example is modelled on SOC 2; whether your process meets it is a decision for your compliance team.
No. Minctrl will not make a process runnable while an irreversible step can be reached without a human gate, and one person cannot sign two gates of the same run.