# SOC Analyst Agent

*/Agents/SOC_Analyst_Agent*

## Neighborhood

### Composed into

- [Dropzone Security](/Startups/Dropzone_Security) — composes · Startups

### What it does

- [Collect and Enrich Indicators of Compromise](/Tasks/Collect_and_Enrich_Indicators_of_Compromise) — performs · Tasks
- [Correlate Events Across Log Sources](/Tasks/Correlate_Events_Across_Log_Sources) — performs · Tasks
- [Document Investigation Timeline](/Tasks/Document_Investigation_Timeline) — performs · Tasks
- [Escalate Confirmed Incidents](/Tasks/Escalate_Confirmed_Incidents) — performs · Tasks
- [Triage SIEM Alert Queue](/Tasks/Triage_SIEM_Alert_Queue) — performs · Tasks

### Realizes

- [Managed Detection And Response](/Services/Managed_Detection_And_Response) — realizes · Services
- [Security Operations Center Staffing](/Services/Security_Operations_Center_Staffing) — realizes · Services

### Uses tool

- [Query Security Event Logs](/Action/Query_Security_Event_Logs) — uses tool · Action
- [EDR Console](/Products/EDR_Console) — uses tool · Products
- [SIEM Platform](/Products/SIEM_Platform) — uses tool · Products
- [Threat Intelligence Feed](/Products/Threat_Intelligence_Feed) — uses tool · Products