InternshipKey terms and common mistakes
The words you will hear in SOC & SIEM work and the mistakes that most often cost interns approvals.
Key terms
| Term | Meaning |
|---|---|
| SOC | Security Operations Centre |
| Log source | System producing logs |
| SIEM | Security Information and Event Management |
| Detection rule | Logic that generates an alert |
| Enrichment | Adding context to an alert |
| EDR | Endpoint Detection and Response |
| SOAR | Security Orchestration, Automation and Response |
| Threat intelligence | Knowledge about threats |
Common mistakes to avoid
- Running attack tools against systems you do not own or have permission to test.
- Closing alerts without writing down the evidence.
- Trusting one indicator, like an IP, without context.
- Leaving noisy rules untuned until analysts ignore them.
- Not mapping detections to MITRE ATT&CK, so coverage gaps stay hidden.
Want to go deeper? The free SOC & SIEM learning path has short modules, games and a certificate for each module.