Internship
Student login
← SOC & SIEM learning path
SOC & SIEM · Module 1 of 10

What is a SOC?

A Security Operations Centre monitors and defends an organisation 24×7.

📖 Key ideas

  1. A SOC detects, investigates and responds to security threats.
  2. Tiers: L1 (triage alerts), L2 (investigation), L3 (advanced hunting/IR).
  3. People, process and technology work together.
  4. SOCs can be in-house, outsourced (MSSP) or hybrid.
  5. Key tools: SIEM, EDR, SOAR, threat intelligence.
💡 Real-life example: A SOC is a city's police control room watching cameras and dispatching responders.
SOCSecurity Operations Centre
L1 analystTriage-level SOC analyst
MSSPManaged Security Service Provider
TriageSorting alerts by priority