Security orchestration, automation and response

Tooling that coordinates security tools and automates the repeatable steps of alert triage and incident handling.

Covers orchestrating security tools and automating the triage and response steps of incident handling. Collecting and correlating log and event data for detection is under Security information and event management.

Scheme

• Technologies and capabilities

Broader terms

• Security operations