When it comes to cybersecurity, many people think of “firewalls” and “antivirus software,” but behind the scenes, there is a well-defined “special forces” team—the Security Operations Center (SOC) team. Today, let’s clarify the responsibilities of different roles within the SOC in just 5 minutes.SOC Manager: The Team’s “Commander”The SOC Manager is the leader and strategist … Read more
The Security Operations Center generates thousands of alerts daily. Many of these are low-priority, repetitive, or false positive alerts. At first glance, this seems like a technical issue. However, it is fundamentally a business problem. Every alert has a cost When analysts are overwhelmed by a flood of notifications, they spend far more time sifting … Read more
I recently passed the Offensive Security Defensive Analyst (OSDA) exam, which is OffSec’s first and only defensive security course aimed at analysts and threat hunters working in Security Operations Centers (SOC). At the time of writing this article, the SOC-200: Fundamentals of Security Operations and Defensive Analysis course consists of 19 modules (including lab sections), … Read more
Clarification of AI SOC, AI SOP, AI Assistants, and SOC AgentsAI SOC is a very general term that has actually existed for a long time.In a broad sense, AI SOC refers to SOCs empowered by AI. This is not a technical term nor a product category (Note: SOC is not a product), but specifically refers … Read more
The Evolution of Security Operations Centers (SOC): How Continuous Threat Exposure Management Reshapes Security Operations Key Points: Traditional SOCs face a flood of alerts.Lack of environmental context and threat intelligence.Attackers exploit chained exposures and bypasses.Continuous Threat Exposure Management (CTEM) provides context.Transforms passive detection into proactive risk governance. Terminology (first appearance marked): CTEM (Continuous Threat Exposure … Read more
In the previous article, we briefly analyzed what alarm noise reduction in SOC platforms is. This article continues to analyze what alarm assessment in SOC platforms entails.After gathering information online, there are many explanations, as follows:1:Alarm assessment refers to the process by which security personnel or systems conduct in-depth analysis and judgment of alarm information … Read more
Recently, Dan Haagman, the founder and CEO of Chaleit, has deeply reflected on the effectiveness of Security Operations Centers (SOCs), prompting him to propose a potentially uncomfortable viewpoint: despite enterprises investing millions to build SOCs and deploying cutting-edge detection technologies, data breaches continue to rise at an alarming rate. Based on observations of large enterprises … Read more
Recently, Dan Haagman, the founder and CEO of Chaleit, has deeply reflected on the effectiveness of Security Operations Centers (SOCs), leading him to propose a potentially uncomfortable viewpoint: despite companies investing millions to build SOCs and deploying cutting-edge detection technologies, data breaches continue to rise at an alarming rate. Based on observations of large enterprises … Read more
Shake Network Technology NewsClick the follow button on the right for the latest technology news!Despite major companies investing millions of dollars or RMB in Security Operations Centers (SOC) and advanced detection technologies, data breaches remain frequent and are on the rise. Based on practical experience, currently, only about 5% of SOCs can effectively respond to … Read more
Despite major enterprises investing millions of dollars or RMB in Security Operations Centers (SOC) and advanced detection technologies, data breaches remain frequent and are on the rise. Based on practical experience, currently, only about 5% of SOCs can effectively respond to increasingly complex identity-based attacks. This is not a technical flaw, but a paradigm issue—we … Read more