A SOC engineer discovers that the organization had three DDOS attacks overnight.

Run and evaluate a full packet capture on the workloads, review SIEM logs, and define a root cause.

Run and evaluate a full packet capture on the workloads, review SIEM logs, and plan mitigation steps.

Check SOAR to learn what the security systems are reporting about the overnight events, research the attacks, and plan mitigation step.

Check SOAR to know what the security systems are reporting about the overnight events, review the threat vectors, and define a root cause.