News for hackers. Stuff that matters.

A comment on DEV-0537 targeting organizations for data exfiltration and destruction. Parent comment

Re:DEV-0537 targeting organizations for data exfiltration an... by cookiengineer on Wednesday March 23, 2022 @01:01AM (#30775129)
Oh, sorry. Security Operations Center.

They're basically the ones watching alert dashboards like suricata all day, investigating issues and trying to isolate systems that have been compromised.

So they're the operational part of an IT security department. Sometimes they're also called CSIRT.

[ Parent | on HN ]
Re:DEV-0537 targeting organizations for data exfiltration an... by Datagenerator on Wednesday March 23, 2022 @01:51AM (#30775399)
Frequently combined as SOC / SIEM, the acronym for Security Information and Event Management.

Dataflow analysis can be provided by for example Cisco Smart Network Application (SNA). A system that displays an overview of the network topology including detailed monitoring information for devices and traffic.

[ Parent | on HN ]