A Security Operation Center (SOC) is a centralized function within an organization employing people, processes, and technology to continuously monitor and improve an organization's security posture while preventing, detecting, analyzing, and responding to cybersecurity incidents.  

The NIST Cybersecurity Framework provides a policy framework of computer security guidance for how private sector organisations  can assess and improve their ability to prevent, detect, and respond to cyber attacks.  

MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations of cyber security threats. They're displayed in matrices that are arranged by attack stages, from initial system access to data theft or machine control.  

The kill chain model describes an attack by an external attacker attempting to gain access to data or assets inside the security perimeter. The attacker performs reconnaissance, intrusion of the security perimeter, exploitation of vulnerabilities, gaining and escalating privileges, lateral movement to gain access to more valuable targets, attempts to obfuscate their activity, and finally exfiltrate data from the organization.

Email security describes different techniques for keeping sensitive information in email communication and accounts secure against unauthorised access, loss or compromise. Email is often used to spread malware, spam and phishing attacks.  

A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. Firewalls have been a first line of defence in network security for over 25 years.  

Identity and Access Management is a Cyber/Information security discipline that ensures right people have appropriate access to the organization's critical systems and resources at the right time.  

NfSen is a graphical web based front end for the nfdump netflow tools. NfSen allows you to: Display your netflow data: Flows, Packets and Bytes using RRD (Round Robin Database). Easily navigate through the netflow data.  

Web security means protecting a website or web application by detecting, preventing and responding to cyber threats.This integral division of Information Security is vital to the protection of websites, web applications, and web services.  

Security Intelligence is the collection, evaluation, and response to data generated on an organization's network undergoing potential security threats in real-time. This platform was developed from log management, SIEMs, NBADs, and network forensics.  

A web application firewall (WAF) is a firewall that monitors, filters and blocks data packets as they travel to and from a website or web application. A WAF can be either network-based, host-based or cloud-based and is often deployed through a reverse proxy and placed in front of one or more websites or applications.