ConceptsPivoting
Pivoting
In SOC investigation, moving from one piece of evidence to related ones, following an indicator, account, host, or behavior to uncover connected activity and expand understanding of an incident.
8 direct links3 lessons
Concept Neighborhood
Explore this concept’s connections in the groups below.
Related · bigger circles cover more lessons
Start here
Internal Intelligence
A related concept to explore, covered by 6 lessons.
Relatedsorted by lesson coverage
Internal IntelligenceStart here
6
lessons
Investigation Expansion
6
lessons
SIEM Investigation Workflow
5
lessons
Behavioral Pivoting
3
lessons
Cross-Source Correlation
3
lessons
Indicator Pivoting
3
lessons
Show 2 more connections
Related Lessons
3 lessons cover this conceptThe SOC Analyst Role in Depth
SOC Analyst
A Structured Methodology for Alert Triage
SOC Analyst
Investigation Deep Dive: Pivoting Through Telemetry
SOC Analyst
Sign in to open lesson content directly.