4 ms·
Oh, sorry. Security Operations Center. They're basically the ones watching alert dashboards like suricata all day, investigating issues and trying to isolate s
by cookiengineer 5y ago
Oh, sorry. Security Operations Center.
They're basically the ones watching alert dashboards like suricata all day, investigating issues and trying to isolate systems that have been compromised.
So they're the operational part of an IT security department. Sometimes they're also called CSIRT.
- Datagenerator 5y agoFrequently combined as SOC / SIEM, the acronym for Security Information and Event Management. Dataflow analysis can be provided by for example Cisco Smart Network Application (SNA). A system that displays an overview of the network topology including detailed monitoring information for devices and traffic.