Security Incident Triage
Time guide
Initial checks: approximately 10 to 20 minutes Detailed investigation: approximately 20 to 60 minutes Purpose # Validate alerts, establish scope, classify severity and preserve investigation evidence.
SOC
Security Alert Severity Classification
Time guide
Initial checks: approximately 10 to 20 minutes Detailed investigation: approximately 20 to 60 minutes Purpose # Classify informational, low, medium, high and critical alerts consistently.