20
That senior SOC analyst told me to stop chasing every low severity alert
He said 'you're burning out on noise, focus on the 12% that actually matter' and I finally stopped trying to investigate every single DNS query flagged by our SIEM. Has anyone else had to completely rework their triage process after getting blunt feedback?
1 comments
Log in to join the discussion
Log In1 Comment
avery_walker301d agoMost Upvoted
Same vibe as when my GPS said "recalculating" for the 50th time.
8