https://catscrdl.io/tags/alert-triage/ Recent content in Alert Triage on Catscrdl Hugo en Fri, 07 Aug 2026 00:00:00 +0000 https://catscrdl.io/blog/whotriagesthealerts/ Fri, 07 Aug 2026 00:00:00 +0000 https://catscrdl.io/blog/whotriagesthealerts/ <h1 id="intro">Intro</h1> <p>There was a question I saw the other day asking if detection engineers (DE), the folks who author alerts, should also be primarily responsible for their triage. There was large support for having the detection authors also play a large role in initial triage, often as part of the oncall. I largely disagree with this stance and am going to use some time Friday to quickly argue why you&rsquo;re likely compensating for technology and process failures if you do that.</p>