arXiv:2609.21147v1 Announce Type: new Abstract: Security Operations Centers (SOCs) often rely upon on-the-job training focusing on the specific tools and procedures a SOC utilizes. The complexity in tooling can overshadow the underlying reasoning process, hindering an analyst's ability to learn investigative skills. We formulate the concept of "non-perishable knowledge" which corresponds to investigative thinking skills independent of tools.

Read the full article at arXiv cs.CR →