hard20 pts · first answer countssiemsoc-metrics
MTTR fell, but something is off
After a bonus was tied to MTTR, it fell 60% in a month. At the same time, alerts closed as false positive jumped from 50% to 85% with the same rules. What is the most likely story?
Discussion 0
Join free to post in the discussion.
Related questions
- What stats count by does in SPLCybersecurity Analyst
- Grouping with summarize in KQLCybersecurity Analyst
- Why logs go to a SIEMCybersecurity Analyst
- Why normalise to a common schemaCybersecurity Analyst
- What a SIEM is forCybersecurity Analyst
- What a Splunk index isCybersecurity Analyst
- What sourcetype tells SplunkCybersecurity Analyst
- The Splunk Universal ForwarderCybersecurity Analyst