EP202 Beyond Tiered SOCs: Detection as Code and the Rise of Response Engineering
Cloud Security Podcast by Google
00:00
Integrating Threat Intelligence in SOCs
This chapter explores the intricacies of detection and response engineering within security operations centers (SOCs), emphasizing the need for a cohesive approach between detection and response strategies. It critiques the limitations of traditional threat intelligence frameworks and advocates for real-time, actionable insights to enhance threat management. The discussion also highlights the evolution of detection methods and the shift towards new architectures that prioritize understanding adversary behaviors and intelligent mapping of threats.
Transcript
Play full episode
