Introduction The IBM CISO SOC in Amsterdam is expanding into a multi-disciplinary team that protects the IBM organization around the clock against threats both internal and external, with a focus on EU-located assets and networks. To do this, we perform security event detection, response and remediation. We work closely together with other teams such as forensic analysts, threat hunters, threat intelligence and platform engineers. As time is our most valuable resource, we'd rather not look at t…