Each directory has its own README covering formats, sources and known limits. Read it before using the list. A SOC is rarely short of events. What it lacks is the context that tells an analyst which ...