-
Q: Who is the author of the SOC Stock Metrics document?A: David Mackey.
-
Q: What are the four classes of metrics defined in the document?A: Business Processes, Technological Processes, Operational Processes, and Analytical Processes.
-
Q: What does the 'Number of devices per employee' metric track?A: The ratio of SOC analysts to the number of monitored feeds/devices to prevent burnout.
-
Q: What is the purpose of tracking 'Patched systems'?A: To measure adherence to internal patch management policy.
-
Q: What does the 'Top 10 events' metric show?A: The most severe security events over time, used to identify attack trends.
-
Q: What is the 'Golden Triangle' mentioned in the context of metrics?A: People, Process, and Technology.
-
Q: What is the 'Infected systems' metric?A: Shows the number of systems infected by malcode and cleaned over time.
-
Q: What is the 'Top 10 attacked ports' metric used for?A: To show trends in port attacks by day.
-
Q: What date was the document last updated?A: Thursday, October 23, 2008.
Ask a question
Have a doubt or need clarification?
I’m here to help. Share your question, and I’ll get back to you with the guidance you need regarding the course.
Thank you!
I have received your message and I shall get back to you shortly.