Last summer I wrote about the Pyramid of Influence the idea that in a Human Augmented SOC, not all analyst feedback is equal. Clicking False Positive is Tier 1. It decorates the interface. But FP because powershell.exe is patch automation on this host that’s Tier 4. That’s not tagging, it’s teaching.
Stellar Cyber
Posted on
From Influence to Evidence: Teaching the SOC Not to Make the Same Mistake Twice
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (0)