Identifies, analyzes, and responds to security incidents and threats.
Products:
- Threat Intelligence Platforms (e.g., Recorded Future, Anomali)
- SOAR (Security Orchestration, Automation, and Response) (e.g., Palo Alto Cortex XSOAR, Splunk SOAR)
- Digital Forensics tools (e.g., EnCase, FTK)