Cyberattacks are proliferating rapidly and growing in scope as adversaries move laterally across the network and traverse diverse environments. As the Security Operations Center (SOC) works to deal with the increasing threat, they can find themselves overwhelmed by an unacceptably high level of false positives, overworked, and let down by legacy detection and prevention controls. Improving the SOC analyst experience comes down to modernizing tools and processes, closing visibility gaps, and removing friction from the detection, incident investigation, and response workflow. VMware Carbon Black XDR shifts the balance of power away from adversaries and back to security teams.