Alert triage
Deciding whether an alert represents real malicious activity. Historically the largest consumer of analyst time and the main source of burnout in the role. Exaforce customers report a 90% reduction in false positives.
Defined in the AI SOC glossary.