Internship← Cybersecurity & Ethical Hacking learning pathCybersecurity & Ethical Hacking · Module 8 of 10
Security operations and incident response
Detect and respond to attacks.
📖 Key ideas
- SOC teams monitor alerts 24×7.
- SIEM collects and correlates logs.
- Incident response: prepare, identify, contain, eradicate, recover, learn.
- Preserve evidence and communicate clearly.
- Report significant incidents to CERT-In within required timelines.
💡 Real-life example: A SOC is a CCTV control room watching all cameras; incident response is the fire brigade drill.
SOCSecurity Operations Centre
SIEMSecurity Information and Event Management
ContainmentStopping spread
Lessons learnedPost-incident review