blue team
termsecurityops culture
The defenders: the people and tooling that detect, respond to, and recover from attacks.
The blue team is the standing defence, monitoring, hardening, hunting, and responding, the counterpart the red team is testing. Most of the work is unglamorous and continuous: the alerts that fire, the logs that get read, the drills that get run.
Also known as: blue-team, blue teaming, defenders