SOC & Blue Team terms
SIEM alerts, log analysis, threat hunting, and incident workflows
Terms related to security monitoring, detection, alert triage, and incident response.
Category snapshot
—
Published terms in this category
…
Published terms
8
Example concepts
3
Learning paths
How to use
Read → connect → practice
Each term links to tutorials, labs, tools, and quizzes so definitions become practical knowledge.
Read the definition
Plain-language explanations with real-world context.
Explore related terms
Build connected knowledge across the same domain.
Practice with resources
Follow linked tutorials, labs, and assessments.
Catalog
Terms in soc & blue team
Published definitions focused on this cybersecurity domain.
Outcomes
What you'll understand
- Master blue-team vocabulary for SOC analyst roles
- Understand alert triage, log correlation, and playbook language
- Connect detection terms to SIEM and EDR workflows
- Build context for incident response and threat hunting
More topics
Explore other glossary categories
Jump between fundamentals, offensive security, blue team, cloud, compliance, and more.
Cybersecurity Fundamentals
Threats, risks, controls, and the CIA triad in plain language
View categoryEthical Hacking & Penetration Testing
Recon, exploitation, OWASP risks, and professional reporting
View categoryWeb Application Security
Authentication, sessions, OWASP Top 10, and secure web design
View categoryMalware & Threats
Malware families, attacker behavior, and threat indicators
View categoryLinux Security
Permissions, SSH, sudo, auditd, and production hardening
View categoryNetworking Security
Protocols, firewalls, VPNs, and traffic inspection basics
View categoryCloud Security
IAM, logging, misconfigurations, and shared responsibility
View categoryDevSecOps
CI/CD security, containers, secrets, and supply chain terms
View categoryCompliance & GRC
SOC 2, ISO 27001, controls, evidence, and audit readiness
View categoryIncident Response & Forensics
Containment, forensics, evidence handling, and recovery
View categoryIdentity & Access Security
Authentication, IAM, MFA, privileged access, and directory security
View category