What is Security Operations Center (SOC)?
A SOC operates around the clock, using tools such as SIEM, EDR, and threat intelligence platforms to detect and investigate incidents. Analysts are organized into tiers — from alert triage (Tier 1) to advanced threat hunting (Tier 3). Many organizations use managed SOC services (MSSP or MDR) instead of building in-house.
Understanding this concept is crucial for maintaining a robust security posture. In the context of modern cyber threats, security operations center (soc) represents a significant area of focus for security professionals and organizations alike.
Related Terms
Advanced Persistent Threat (APT)
A sophisticated, targeted cyberattack in which an attacker gains unauthorized access to a network and remains undetected for an extended period.
Asset Discovery
The process of identifying all hardware and software devices within an organization's network environment.
