Detection Pipeline — From Logs to Response
The SOC detection pipeline from log sources, collection, normalization, correlation, alerting, triage, to response, and use-case design
4 docs tagged with "security-monitoring"
View all tagsSOC · Security Monitoring — Overview
The role and structure of a Security Operations Center (SOC) and this section, from a large-scale remote-monitoring operations view
SOC Metrics and Quality Management
SOC metrics like MTTD/MTTR, alert and false-positive management, detection-rule tuning, and quality management (QM)
SOC Operating Model — Tiers, Shifts, Roles
SOC analyst tier structure, 24x7 shifts, role division, and operating forms (in-house/MSSP/hybrid)