Blue Team
Definition
A blue team is the defensive security team responsible for maintaining an organization's security posture, detecting threats, responding to incidents, and continuously improving defenses — often the team that operates the SOC.
A blue team is the defensive security team responsible for maintaining an organization's security posture, detecting threats, responding to incidents, and continuously improving defenses — often the team that operates the SOC.