Soc Glossary
Browse 12 soc terms defined in plain English, from the cultural dictionary of computing.
12 Soc Terms
- Alert Fatigue
- The desensitization and reduced response quality that occurs when analysts are overwhelmed by too many alerts, especially low-value or repetitive ones. Alert...
- Blue Team
- The defensive security team responsible for detecting, responding to, and mitigating attacks — the counterpart to red teams. Includes SOC analysts, incident...
- Incident Handler
- A responder responsible for triaging, investigating, coordinating, and driving containment or recovery during security incidents. Incident handlers need both...
- Incident Response
- The organized approach to addressing and managing a security breach or cyberattack, covering preparation, identification, containment, eradication, recovery,...
- Log Monitoring
- The continuous review of logs, either manually or through automated tooling, to detect suspicious activity, failures, or policy violations. Log monitoring is...
- Managed Detection and Response
- A managed security service in which an external provider delivers threat monitoring, detection engineering, triage, and often incident-response support using...
- MDR
- Short for managed detection and response, a service where an external security team monitors telemetry, investigates alerts, and often helps contain threats on...
- Mean Time to Detect
- A security operations metric measuring the average time between the start of malicious activity and when defenders detect it. Mean time to detect helps...
- Monitoring Dashboard
- A visual interface that aggregates key metrics, alerts, and telemetry so operators can see the current state of security or infrastructure at a glance. Good...
- MSSP
- Short for managed security service provider, a company that delivers outsourced security functions such as monitoring, device management, alert triage,...
- SIEM
- Security Information and Event Management — a system that aggregates log data from across an organization's infrastructure, correlates events, and alerts...
- SOAR
- Security orchestration, automation, and response platforms coordinate tools and automate investigation or containment workflows. It shows up in application...
Related Topics
- Monitoring (3 terms in common)
- Operations (2 terms in common)
- Logging (2 terms in common)
- Incident Response (1 terms in common)
- Detection (1 terms in common)
- Mdr (1 terms in common)
- Threat Monitoring (1 terms in common)
- Managed Services (1 terms in common)
- Military Origin (1 terms in common)
- Managed Detection And Response (1 terms in common)
- Process (1 terms in common)
- Metrics (1 terms in common)
- Managed Security (1 terms in common)
- Emergency (1 terms in common)
- Defensive Security (1 terms in common)
- Dashboards (1 terms in common)
- Automation (1 terms in common)
- Providers (1 terms in common)
- Response (1 terms in common)
- Visibility (1 terms in common)