Grey Noise - Improve Analyst Efficiency by Reducing Alerts
Summary: GreyNoise founder and CEO Andrew Morris is presenting at the Security Analytics & XDR Demo Forum, held Tuesday, August 24 to Thursday, August 26, on improving analyst efficiency by eliminating internet noise from security alerts. In the demo, an IP address that raised an IDS, SIEM, or SOAR alert is looked up in GreyNoise's web interface at viz.greynoise.io and returned as benign because it belongs to Shodan, a known security company scanning the internet.
Bottom line: Every alert an analyst chases down to a known benign scanner like Shodan is time not spent on the alert that matters - and the source's answer is a lookup that clears the IP in one step.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026