Skip to main content
Back to all posts
Tag

#alert-triage

Abstract dark illustration of three stacked translucent layers with a single amber line passing down through each one
Best Practices

SOC Tools by Tier: What T1, T2 and T3 Analysts Open First

SOC tools sorted by tier and task, not category: what a T1 analyst opens in an alert's first 10 minutes, what T2 and T3 add, and what to practice free.

Astrid LindqvistSep 28, 202613 min read