20
That senior SOC analyst told me to stop chasing every low severity alert
He said 'you're burning out on noise, focus on the 12% that actually matter' and I finally stopped trying to investigate every single DNS query flagged by our SIEM. Has anyone else had to completely rework their triage process after getting blunt feedback?
2 comments
Log in to join the discussion
Log In2 Comments
avery_walker3029d agoMost Upvoted
Same vibe as when my GPS said "recalculating" for the 50th time.
8
umamoore27d ago
Wait, @avery_walker30, you actually let it get to 50 recalculations? I would've thrown my phone out the window by number 10, no joke. Your patience is next level.
8