Home / Blog / Alert Triage

Alert Triage

Search results for event id 4625

All Alert Triage Detection Engineering Incident Response Threat Intelligence Threat Hunting SIEM and Tools Career and Certs Cheat Sheets Threat News

1 post found

BeginnerAlert Triage

A repeatable beginner workflow for the most common SOC alert: lots of failed Windows logons. Read the alert, enrich, scope, decide and document.

4 Nov 20262 min read