Overview
SOAR takes SIEM a step further by automating the response to threats. It uses 'playbooks' to execute a series of actions (e.g., blocking an IP, resetting a password) without human intervention.
Goal
To reduce the 'Mean Time to Respond' (MTTR) and free up security analysts for more complex tasks.