Romanian Cyber Security Journal / Spring 2023, No. 1, Vol. 5

SaaS Investigation Tool

Mihai APOSTOL, Bogdan PALINIUC

---

Abstract

Managing security events in a SoC like environment is not an easy task and it can constitute a great challenge, especially for SaaS where the number of security events are overwhelming. Cyber security issues, alerts, events, all need to be investigated and recorded by the SoC analysts and take the appropriate actions. This can be achieved by using a dedicated software application that can manage cybersecurity investigations within multiple computer networks. In this article, it will be described such a software application that can help and drastically increase the SoC analyst’s efficiency and the number of security investigations that he can manage. Also, we will focus on how the security event/ alert should be investigated using this proposed software.

Keywords

SoC, cyber security investigations, SaaS, investigation tool, security event