// tool reference · Monitoring & Detection
SOC Console Business
Multi-tenant log ingestion, rule-based detection and alerting.
What it does
The multi-tenant SOC surface — ingestion, detections, incidents and AI triage. Superseded by the unified SOC Operations console.
When to use it
- You are running continuous log ingestion rather than one-off analysis.
What you get back
Incidents, detections, entity risk and alerting.
How it works
Deterministic detection on ingest; AI triage on a schedule.
Privacy
Ingested events ARE stored, partitioned by tenant. This is the one analysis path that persists by design — it has to, to correlate over time.
Standards
MITRE ATT&CKSOC 2 (CC7.2)