As connectivity increases in automotive and rail transport, operators need comprehensive security monitoring solutions. This paper presents a multi modal Vehicle Security Operations Center architecture that covers automotive and rail systems across vendors and integrates the VATT&EK framework for standardized attack classification. It implements a five step data processing model from raw data collection through Electronic Control Unit and domain monitoring to vehicle and fleet specific analysis. The model uses intelligent sensors, a Vehicle Security Event Center and a central VSOC. New cross vendor security event and alert formats extend existing AUTOSAR standards with forensic fields such as rule_id, severity and confidence to enable GDPR compliant resource and data efficient monitoring. Scenario-based evaluations demonstrate that the architecture meets defined VSOC requirements. The solution provides a scalable foundation for future autonomous transport applications.