(SOAR) Security Orchestration, Automation, and Response.
A set of tools used by Security Operations Centers that use APIs to connect to networking equipment and tools in the security stack and automatically collect telemetry from those devices in ways that the SOC can handle in prescribed ways.