Can SOC Operators Explain their Decisions while Triaging Alarms? A Real-World Study

Jessica Moosmann, Irdin Pekaric, Giovanni Apruzzese

Security Operations Centers (SOCs) are pivotal in modern enterprises. Tasked to monitor complex network environments constantly under attack, SOCs can be active 24/7 and can includ…