SOC Metrics from Incidents
Metrics derived from incident data, MTTD, MTTR, dwell time, severity distributions, that show how the SOC actually performed against real events rather than against synthetic measures.
Concept Neighborhood
Explore this concept’s connections in the groups below.
Start here
Post-Incident Review
A related concept to explore, covered by 13 lessons.
Post-Incident ReviewStart here
13
lessons
Incident Intelligence
6
lessons
SOC Metrics Framework
6
lessons
Mean Time to Detect (MTTD)
5
lessons
SOC Metrics That Matter
5
lessons
Dwell Time
1
lesson
Show 3 more connections
Related Lessons
6 lessons cover this conceptValidate the Alert and Open the Case
SOC Analyst
Expand Scope and Declare the Incident
SOC Analyst
Coordinate and Verify Containment
SOC Analyst
Preserve Evidence and Assess Sensitive-Data Impact
SOC Analyst
Hunt for Residual Activity and Repair Detection Gaps
SOC Analyst
Recover, Communicate, Measure, and Learn
SOC Analyst
Sign in to open lesson content directly.