Combined SOC Webinar Q&A: From EDR to ITDR and ASO … and ChatGPT | by Anton Chuvakin | Anton on Security | Medium

In recent weeks, I did two fun webinars related to Security Operations, and there was a lot of fun Q&A. The questions below are sometimes slighting edited for clarity, typos, etc. For extra fun, I had ChatGPT answer some of them, to see if it can replace me :-) So, first, ISACA webinar “Modernize Your SOC for the Future” focused on our Autonomic Security Operations vision. Q: If not called SOC, would you like to share what you have named the team? [this question is related to the fact that at Google, there is no team called “SOC”] A: The discussion about naming the security operation center comes from the longer debate about whether SOC includes just the analysts watching the screens or the infrastructure and processes for producing the alerts, threat research, detection creation, etc. As a result, some organizations assume that SOC stands only for a team content watching the screens and they do not want to call their combined/integrated team the same name The names I encountered are j

In recent weeks, I did two fun webinars related to Security Operations, and there was a lot of fun Q&A. The questions below are sometimes slighting edited for clarity, typos, etc. For extra fun, I had ChatGPT answer some of them, to see if it can replace me :-) So, first, ISACA webinar “Modernize Your SOC for the Future” focused on our Autonomic Security Operations vision. Q: If not called SOC, would you like to share what you have named the team? [this question is related to the fact that at Google, there is no team called “SOC”] A: The discussion about naming the security operation center co