Fortinet details SOCaaS security monitoring services

Fortinet has outlined its Security Operations Center as a Service (SOCaaS) offerings, designed to complement incident response lifecycles through continuous cyber awareness. The service focuses on monitoring and detection by analyzing forwarded security events, performing alert triage, and escalating verified threats to security teams.

Key capabilities include the removal of false positives and the detection of policy violations, initial compromises, malware, intrusions, and lateral movement. The service utilizes standard event handlers and playbooks to correlate FortiGuard threat research with received events, providing automated correlation and context enrichment.

Additionally, SOCaaS provides investigation and analysis through expert analysts who validate incidents and provide forensic analysis on endpoints managed by FortiClient EMS. The service also offers containment and response support, including remote assistance and remediation recommendations following verified event notifications.