Several factors are converging to exert pressure on how security operations centers (SOCs) traditionally function. Evolving information technology (IT) infrastructure, such as cloud migration, serverless services and endpoints being off-network, are straining existing SOC methodologies and tooling. The attack surface is expanding as a result of the distributed workforce and adoption of cloud-based infrastructure and services. Furthermore, increasing numbers of organizations need to also secure non-traditional IT environments such as operational technology (OT), the Internet of things (IoT) and the Internet of medical things (IoMT).