SOC Operations, Investigation & Response permissions ↗

This section includes all the daily operational tools primarily used by Tier-1 through Tier-3 analysts and Threat Hunters for triage, investigation, and case response.