SOC Ops covers how a Security Operations Centre is run day to day: SOC tiers and roles, the alert triage and escalation workflow, SIEM and SOAR in the SOC, playbooks and shift handover. It also covers SOC metrics such as MTTD, MTTR and false positive rate, SOC maturity, managed SOC and MDR services, and reducing analyst burnout through automation.