SOC Operations

Purpose

Define SOC structure, analyst workflows, tier responsibilities, escalation paths, shift handovers, and SOC performance metrics. Build a high-performing security operations team that effectively detects, triages, investigates, and responds to security incidents.

Agent Protocol

Trigger

• "SOC", "security operations center", "SOC analyst", "SOC tier", "Tier 1", "Tier 2", "Tier 3"
• "security monitoring", "alert triage", "SOC workflow", "SOC runbook"
• "shift handover", "SOC dashboard", "SOC metrics", "MTTD", "MTTR"
• "escalation path", "security incident escalation", "SOC manager"
• "24/7 security coverage", "follow-the-sun", "SOC staffing"