Security Operations Center — a centralized team and facility responsible for monitoring, detecting, and responding to security incidents.
A SOC operates continuously, staffed by analysts at different tiers — from Tier 1 analysts triaging incoming alerts to Tier 3 specialists handling deep investigations and threat hunting.
