Skip to content

Topic

SOC alert triage

The security operations practice of deciding which incoming alerts get investigated and in what depth, historically constrained by analyst time and increasingly automated.

Current clusters