SOC Metrics and Objectives

Walkthrough summary

SOC Metrics and Objectives TryHackMe walkthrough with 10 answered prompts and lab methodology notes.

Sample prompts covered

• Is zero alerts for one month a good sign for your SOC team? (Yea/Nay)
  Open the walkthrough page to inspect the full answer and command flow.
• What is the False Positive Rate if only 10 out of 50 alerts appear to be real threats?
  Open the walkthrough page to inspect the full answer and command flow.
• Imagine a scenario where the SOC team receives a critical alert on Saturday.
  Open the walkthrough page to inspect the full answer and command flow.
• Monday
  Open the walkthrough page to inspect the full answer and command flow.
• Provide the MTTD, MTTA, and MTTR via comma as your answer (e.g. 10,20,30).
  Open the walkthrough page to inspect the full answer and command flow.