10 Things You Could Do With Your Time Instead of Triaging a False Positive Alert | Grey Noise Blog

Summary: GreyNoise cites an average drawn from three vendor reports that a single SOC analyst wastes 8.4 hours per week triaging false positive alerts. The company says its data provides context on internet-wide scanners, crawlers, and other suspicious activity that trigger false alarms, so teams can filter out benign scanners in their alerting workflow.
Why it matters: At 8.4 hours per analyst per week, a large share of SOC capacity goes to alerts that turn out to be a security company scanning the internet - time not spent on genuine threats.

Read the original at GreyNoise Blog ↗