Security Orchestration, Automation, and Response (SOAR)

Summary

A tool that automates responses to cyber threats, helping SOC teams work faster and smarter.

Description

Using bespoke playbooks, SOAR can automatically isolate infected devices or block suspicious IP addresses. For example, during a phishing attack, SOAR might immediately quarantine emails and notify staff, reducing response time and risk.