SOAR
Security Orchestration, Automation, and Response
SOAR platforms automate repetitive security tasks and orchestrate responses across multiple tools. They use playbooks to standardize incident response steps and reduce manual workload.
Como é usado em cibersegurança
Incident responders build playbooks that automatically enrich alerts with threat intelligence and isolate compromised hosts. SOC analysts use SOAR to reduce response times from hours to minutes. Security engineers integrate SOAR with SIEM, EDR, and ticketing systems to create end-to-end workflows.
Termo relacionado no glossário: soar
As definições são explicações originais escritas para fins de desenvolvimento profissional. Para definições técnicas autoritativas, consulte NIST, ISO ou o órgão de normalização correspondente.