At its simplest, security operations is a four-step cycle: collect logs, enrich incidents, standardize response and — ...