If your goal is defense: monitoring, detecting, and responding to incidents within a Security Operations Center (SOC).