I have received this question from a few clients, but I have 0 experience building a 24x7 SOC.
What are the most relevant security events/incidents any company should monitor using event management tools? Related to servers, antivirus, networks, etc.
I am looking for resources and details on establishing a security operation center (SoC) or network operation center (NoC) based on ITIL or any other applicable regulations. Where can I find good ...