Security Operations Center Framework
SIEM + EDR + User Behavior Analytics
+ Attacker Behavior Analytics + File Integrity Monitor
+ File Access Monitor + Automated Threat Intelligence
+ Honey Credentials / Files / Users / Servers
+ E-W / N-S IDS