QuestionQ173Verified/Incident ResponseCopy linkReport a problemAsk AstroTutorSave questionWhat is the proper sequence of the SOC workflow?ACollect, Ingest, Document, Validate, Report, RespondBCollect, Ingest, Validate, Report, Respond, DocumentCCollect, Respond, Validate, Ingest, Report, DocumentDCollect, Ingest, Validate, Document, Report, RespondShow AnswerAnswerExplanationA SOC collects security data, ingests it for correlation and analysis, validates potential incidents, reports or escalates validated incidents, performs response activities, and documents the incident and lessons learned.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion