Tag: SOC

From 12 Screens to One Pane of Glass — The Day I Stopped Tool-Juggling

A few years ago, I walked into a SOC that had been designed by committee. Each team had chosen their own tools. The network team used one NMS. The security team used a different SIEM. The physical security team had their own VMS with its own server. The automation team ran a standalone SOAR platform

What 24/7 Network Monitoring Really Catches — Anonymised Incidents From Our SOC –>

When we tell prospects about the value of 24/7 monitoring, their first question is usually: “What would you actually catch that we wouldn’t?” Fair question. Here’s our answer — real incidents from our SOC, anonymised. All detected during overnight or weekend shifts, by engineers who were watching when nobody else was. Case 1: The 3