TLDR InfoSec · MISCELLANEOUS
WHAT DOES A SOC ANALYST DO?
Summary from the TLDR InfoSec newsletter
This blog post provides an overview of the role of a SOC analyst. The main functions of a SOC analyst are security monitoring, incident detection, incident analysis, and incident response. Most SOCs are organized into tiers, with tier 1 analysts doing basic triage of alerts and higher tiered analysts doing more senior incident response and threat hunting.