Cybersecurity definition
What is SOC?
SOC stands for Security Operations Center.
By Cyber Tool Stack Editorial TeamUpdated
Definition
The team (in-house or vendor-run) responsible for monitoring security alerts around the clock and responding when something looks like a real incident.
Where SOC fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
SIEMSecurity Information and Event ManagementA central system that collects logs from across an environment, correlates them into alerts using detection rules and behavioral baselining, and lets analysts search historical activity during an investigation.MDRManaged Detection and ResponseA subscription service where a vendor's own analysts monitor an organization's security alerts and respond to routine detections, instead of the customer's team doing it alone.Threat HuntingThe practice of proactively searching historical activity data for signs of a compromise that never triggered an automatic alert.