Roles
What is SOC?
Security Operations Centre: the team that watches alerts around the clock and responds to them.
A security operations centre is the team, and often the room, that monitors alerts, triages them, investigates and starts the response. Many run around the clock in shifts.
The SOC is the main consumer of tactical intelligence. Indicators, detection rules and short context notes from the CTI team help analysts decide quickly whether an alert is real and what to do next.