Alert triage is the process of reviewing, classifying and prioritizing security alerts to decide which ones are real incidents and in what order they are handled. The analyst validates the alert, enriches it with device, user and threat intelligence context, and either closes it as a false positive or escalates it. It is the first task of Tier 1 in a security operations center (SOC).
How TecnetOne handles it: TecnetSOC
security alert triage, SOC triage, alert prioritization, incident triage, Tier 1 triage