Glossary
The security operations glossary
114 plain-English definitions across SOC, SIEM, MDR, detection, and agentic security — each with context on why it matters.
Agentic Ai
Agentic Ai — Definition: definition, context, and why it matters in modern security operations.
Read definitionAgentic Soc
Agentic Soc — Definition: definition, context, and why it matters in modern security operations.
Read definitionAi Soc
Ai Soc — Definition: definition, context, and why it matters in modern security operations.
Read definitionAlert
Alert — Definition: definition, context, and why it matters in modern security operations.
Read definitionAlert Fatigue
Alert Fatigue — Definition: definition, context, and why it matters in modern security operations.
Read definitionAlert Triage
Alert Triage — Definition: definition, context, and why it matters in modern security operations.
Read definitionAnomaly Detection
Anomaly Detection — Definition: definition, context, and why it matters in modern security operations.
Read definitionAttack Chain
Attack Chain — Definition: definition, context, and why it matters in modern security operations.
Read definitionAttack Surface
Attack Surface — Definition: definition, context, and why it matters in modern security operations.
Read definitionAudit Log
Audit Log — Definition: definition, context, and why it matters in modern security operations.
Read definitionAuthentication
Authentication — Definition: definition, context, and why it matters in modern security operations.
Read definitionAuthorization
Authorization — Definition: definition, context, and why it matters in modern security operations.
Read definitionBaseline
Baseline — Definition: definition, context, and why it matters in modern security operations.
Read definitionBlast Radius
Blast Radius — Definition: definition, context, and why it matters in modern security operations.
Read definitionBlue Team
Blue Team — Definition: definition, context, and why it matters in modern security operations.
Read definitionBot Detection
Bot Detection — Definition: definition, context, and why it matters in modern security operations.
Read definitionBrute Force Attack
Brute Force Attack — Definition: definition, context, and why it matters in modern security operations.
Read definitionBusiness Email Compromise
Business Email Compromise — Definition: definition, context, and why it matters in modern security operations.
Read definitionCase Management
Case Management — Definition: definition, context, and why it matters in modern security operations.
Read definitionCloud Detection And Response
Cloud Detection And Response — Definition: definition, context, and why it matters in modern security operations.
Read definitionCloud Security Posture Management
Cloud Security Posture Management — Definition: definition, context, and why it matters in modern security operations.
Read definitionCommand And Control
Command And Control — Definition: definition, context, and why it matters in modern security operations.
Read definitionCompliance
Compliance — Definition: definition, context, and why it matters in modern security operations.
Read definitionContainer Security
Container Security — Definition: definition, context, and why it matters in modern security operations.
Read definitionCorrelation Rule
Correlation Rule — Definition: definition, context, and why it matters in modern security operations.
Read definitionCredential Stuffing
Credential Stuffing — Definition: definition, context, and why it matters in modern security operations.
Read definitionCyber Kill Chain
Cyber Kill Chain — Definition: definition, context, and why it matters in modern security operations.
Read definitionData Exfiltration
Data Exfiltration — Definition: definition, context, and why it matters in modern security operations.
Read definitionData Lake
Data Lake — Definition: definition, context, and why it matters in modern security operations.
Read definitionData Loss Prevention
Data Loss Prevention — Definition: definition, context, and why it matters in modern security operations.
Read definitionDead Letter Queue
Dead Letter Queue — Definition: definition, context, and why it matters in modern security operations.
Read definitionDetection As Code
Detection As Code — Definition: definition, context, and why it matters in modern security operations.
Read definitionDetection Engineering
Detection Engineering — Definition: definition, context, and why it matters in modern security operations.
Read definitionDetection Rule
Detection Rule — Definition: definition, context, and why it matters in modern security operations.
Read definitionDwell Time
Dwell Time — Definition: definition, context, and why it matters in modern security operations.
Read definitionEdr
Edr — Definition: definition, context, and why it matters in modern security operations.
Read definitionEndpoint Detection And Response
Endpoint Detection And Response — Definition: definition, context, and why it matters in modern security operations.
Read definitionEnrichment
Enrichment — Definition: definition, context, and why it matters in modern security operations.
Read definitionEntity Resolution
Entity Resolution — Definition: definition, context, and why it matters in modern security operations.
Read definitionEscalation
Escalation — Definition: definition, context, and why it matters in modern security operations.
Read definitionEvidence
Evidence — Definition: definition, context, and why it matters in modern security operations.
Read definitionExfiltration
Exfiltration — Definition: definition, context, and why it matters in modern security operations.
Read definitionFalse Negative
False Negative — Definition: definition, context, and why it matters in modern security operations.
Read definitionFalse Positive
False Positive — Definition: definition, context, and why it matters in modern security operations.
Read definitionFederated Identity
Federated Identity — Definition: definition, context, and why it matters in modern security operations.
Read definitionFinding
Finding — Definition: definition, context, and why it matters in modern security operations.
Read definitionForensics
Forensics — Definition: definition, context, and why it matters in modern security operations.
Read definitionIdentity Provider
Identity Provider — Definition: definition, context, and why it matters in modern security operations.
Read definitionIdentity Threat Detection And Response
Identity Threat Detection And Response — Definition: definition, context, and why it matters in modern security operations.
Read definitionImpossible Travel
Impossible Travel — Definition: definition, context, and why it matters in modern security operations.
Read definitionIncident
Incident — Definition: definition, context, and why it matters in modern security operations.
Read definitionIncident Response
Incident Response — Definition: definition, context, and why it matters in modern security operations.
Read definitionIndicator Of Compromise
Indicator Of Compromise — Definition: definition, context, and why it matters in modern security operations.
Read definitionInsider Threat
Insider Threat — Definition: definition, context, and why it matters in modern security operations.
Read definitionLateral Movement
Lateral Movement — Definition: definition, context, and why it matters in modern security operations.
Read definitionLeast Privilege
Least Privilege — Definition: definition, context, and why it matters in modern security operations.
Read definitionLog Management
Log Management — Definition: definition, context, and why it matters in modern security operations.
Read definitionLog Normalization
Log Normalization — Definition: definition, context, and why it matters in modern security operations.
Read definitionMachine Identity
Machine Identity — Definition: definition, context, and why it matters in modern security operations.
Read definitionManaged Detection And Response
Managed Detection And Response — Definition: definition, context, and why it matters in modern security operations.
Read definitionMean Time To Detect
Mean Time To Detect — Definition: definition, context, and why it matters in modern security operations.
Read definitionMean Time To Respond
Mean Time To Respond — Definition: definition, context, and why it matters in modern security operations.
Read definitionMfa Fatigue
Mfa Fatigue — Definition: definition, context, and why it matters in modern security operations.
Read definitionMitre Attack
Mitre Attack — Definition: definition, context, and why it matters in modern security operations.
Read definitionMulti Factor Authentication
Multi Factor Authentication — Definition: definition, context, and why it matters in modern security operations.
Read definitionObservability
Observability — Definition: definition, context, and why it matters in modern security operations.
Read definitionOcsf
Ocsf — Definition: definition, context, and why it matters in modern security operations.
Read definitionOpen Cybersecurity Schema Framework
Open Cybersecurity Schema Framework — Definition: definition, context, and why it matters in modern security operations.
Read definitionPassword Spraying
Password Spraying — Definition: definition, context, and why it matters in modern security operations.
Read definitionPeer Group Analysis
Peer Group Analysis — Definition: definition, context, and why it matters in modern security operations.
Read definitionPenetration Test
Penetration Test — Definition: definition, context, and why it matters in modern security operations.
Read definitionPersistence
Persistence — Definition: definition, context, and why it matters in modern security operations.
Read definitionPhishing
Phishing — Definition: definition, context, and why it matters in modern security operations.
Read definitionPlaybook
Playbook — Definition: definition, context, and why it matters in modern security operations.
Read definitionPolicy As Code
Policy As Code — Definition: definition, context, and why it matters in modern security operations.
Read definitionPrivilege Escalation
Privilege Escalation — Definition: definition, context, and why it matters in modern security operations.
Read definitionPrompt Injection
Prompt Injection — Definition: definition, context, and why it matters in modern security operations.
Read definitionPurple Team
Purple Team — Definition: definition, context, and why it matters in modern security operations.
Read definitionRansomware
Ransomware — Definition: definition, context, and why it matters in modern security operations.
Read definitionRed Team
Red Team — Definition: definition, context, and why it matters in modern security operations.
Read definitionRemediation
Remediation — Definition: definition, context, and why it matters in modern security operations.
Read definitionRisk Score
Risk Score — Definition: definition, context, and why it matters in modern security operations.
Read definitionRunbook
Runbook — Definition: definition, context, and why it matters in modern security operations.
Read definitionSanctioned Application
Sanctioned Application — Definition: definition, context, and why it matters in modern security operations.
Read definitionSecurity Data Lake
Security Data Lake — Definition: definition, context, and why it matters in modern security operations.
Read definitionSecurity Operations Center
Security Operations Center — Definition: definition, context, and why it matters in modern security operations.
Read definitionSemantic Model
Semantic Model — Definition: definition, context, and why it matters in modern security operations.
Read definitionSession Hijacking
Session Hijacking — Definition: definition, context, and why it matters in modern security operations.
Read definitionShadow Ai
Shadow Ai — Definition: definition, context, and why it matters in modern security operations.
Read definitionShadow It
Shadow It — Definition: definition, context, and why it matters in modern security operations.
Read definitionSiem
Siem — Definition: definition, context, and why it matters in modern security operations.
Read definitionSigma Rule
Sigma Rule — Definition: definition, context, and why it matters in modern security operations.
Read definitionSoar
Soar — Definition: definition, context, and why it matters in modern security operations.
Read definitionSoc 2
Soc 2 — Definition: definition, context, and why it matters in modern security operations.
Read definitionSupply Chain Attack
Supply Chain Attack — Definition: definition, context, and why it matters in modern security operations.
Read definitionThreat Actor
Threat Actor — Definition: definition, context, and why it matters in modern security operations.
Read definitionThreat Hunting
Threat Hunting — Definition: definition, context, and why it matters in modern security operations.
Read definitionThreat Intelligence
Threat Intelligence — Definition: definition, context, and why it matters in modern security operations.
Read definitionTriage
Triage — Definition: definition, context, and why it matters in modern security operations.
Read definitionTrue Positive
True Positive — Definition: definition, context, and why it matters in modern security operations.
Read definitionTerms are the easy part
See how an agentic SOC applies them — live queue, real verdicts, full evidence trail.