Glossary: Security Monitoring and Automation

SOC (security operations center)

Also written: SOC, mini SOC

The team, or setup, that does security operations: watching alerts, investigating and responding. Alex's minisoc.sh chains logs, rules, a block and a ticket into a mini SOC.