Summary
In this chapter, we laid the groundwork for understanding SOCs, covering their essential roles, their importance, and their remarkable historical transformation. We also examined the differences between traditional and modern SOCs. Finally, we explored how the Microsoft unified XDR and SIEM solution enhances the SOC experience via its cost-saving potential and by enabling effective monitoring of your digital ecosystem.
These tools are very powerful together and when used correctly, they can really save the time required for investigations. In this book, we only scratch the surface, and we highly recommend that you explore all the features by yourselves to gain familiarity with the tools and all the possibilities they provide.
In the next chapter, we will cover some useful resources that can be leveraged to understand the XDR and SIEM stack and get more information about the topics covered throughout the book.
