QuestionQ30
VerifiedIncident ResponseA large financial institution, SOC, recently discovered a sophisticated phishing campaign aimed at its employees, which resulted in unauthorized access to sensitive customer data. The SOC team is under pressure to strengthen its detection and response capabilities to handle this evolving threat. The organization already uses a SIEM system for log aggregation and alerting, along with an EDR solution for endpoint visibility. It also has access to XDR for wider threat detection and XSOAR for security orchestration and automation. As a SOC analyst, you have been asked to recommend an integration strategy that improves real-time threat correlation, streamlines incident-response workflows, and maximizes the use of existing tools. Which of the following integrations would achieve these goals?
Community Discussion