Alert Fatigue and SOC Capacity

A survey of 250-plus SOC practitioners puts 135 minutes between an alert firing and an answer

Prophet Security's report benchmarks attacker breakout at 29 minutes, which makes the hour of queue time before anyone opens an alert worth more than the 25 minutes AI takes off the investigation. The sample is the vendor's own.