Security team responsible for defending against attacks and maintaining security operations. Like the security guards and systems protecting your building.
The blue team monitors security alerts, patches vulnerabilities, and responds to incidents detected by their SIEM and other security tools.