Incident response activities conducted within a Security Operations Center, with a focus on continuous detection, alert triage, escalation, rapid containment, and operational coordination between SOC analysts, response teams, and other security functions. Covers workflows, SOAR automation, effectiveness metrics, and integration with monitoring platforms.