QuestionQ28

VerifiedPlaybook Design and Development

Which three protocols must a Level 3 analyst follow when creating a new SOC alert-handling technique?

Choose three
Explanation

A SOC alert-handling technique needs detection and enrichment logic in SIEM rules or SOAR playbooks, an escalation path that promotes actionable alerts to incidents, and updated documentation that defines the repeatable incident procedure. Production runbooks and playbooks capture operating processes and incident-response/escalation procedures.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!