Example Concept: Alert triage involves evaluating incoming security alerts to determine their priority based on factors such as threat level, impact, and context. This process helps SOC analysts quickly identify critical incidents that require immediate attention, while deprioritizing false positives or low-risk alerts. By streamlining alert management, SOCs can allocate resources more effectively, reduce noise, and maintain a high level of vigilance without overwhelming analysts.